Luminis Cyberattack Leaves Patient Systems Down and Prompts Class-Action Suit

Overview

• Luminis Healthcare reported a cyberattack that took down computer systems on Sept. 1, and core services remain disrupted more than two weeks later with no clear timeline for full restoration.
• Patients and clinicians cannot use the MyChart portal to view records or pay bills and many electronic records functions remain offline while Luminis says telephone service has been restored.
• Three patients filed a class-action lawsuit alleging Luminis stored medical records in an unencrypted, internet-accessible environment and warning the data could be used for identity theft and medical fraud.
• Frontline staff have adopted informal workarounds such as sharing personal cell numbers and wing-level note systems to keep care going, a practice experts warn can raise safety and continuity risks.
• Officials have given limited technical detail about the incident, which highlights wider trends of rising health-system attacks and legal challenges in proving concrete harm from exposed records.