Overview
- Luminis Health, which was hit on Sept. 1, has had core computer systems offline for about two weeks and has restored phone service while patient portals and many electronic records remain down.
- Staff at Anne Arundel Medical Center and other Luminis sites have used paper notes, nurses’ personal phones and ad-hoc communication methods to keep clinics and surgeries running during the outage.
- Three patients filed a class-action lawsuit that alleges Luminis stored patient data in an unencrypted, internet-accessible environment and seeks at least 10 years of credit monitoring and monetary damages.
- Researchers and experts warn that cyberattacks on hospitals can reduce patient volume and raise in-hospital death rates, and they note typical recovery from such attacks often takes about three weeks.
- Luminis says it is investigating whether patient information was affected and is restoring systems, and the case will be watched for whether investigators identify ransomware, the scope of any data exposure, and further legal fallout.