Luminis Health is grappling with a cybersecurity incident that has knocked certain computer systems offline across its Maryland hospital network, forcing staff to send patients to a dedicated helpline while technicians work to restore access. The health system, which operates facilities primarily in central Maryland and on the Eastern Shore, confirmed the disruption affects Luminis Health Anne Arundel Medical Center in Annapolis and Luminis Health Doctors Community Medical Center in Lanham, its two main hospitals.
Luminis Health posted about the incident on Facebook around 6:45 p.m. Tuesday, saying it was experiencing a cybersecurity incident affecting certain systems across the organization, according to WBFF. As of 7:30 p.m. that same evening, the station reported the online patient portal remained down. In its Facebook statement, Luminis Health said its priority remains providing safe, high-quality care to its patients, and it expressed concern about the incident's effects on patients, families and the community.
The station's report did not detail exactly when systems first began experiencing trouble, but Eye On Annapolis reported that widespread outages had already begun the previous Monday, August 31, with staff sent home and networks going dark well before the health system publicly acknowledged a cyber incident. That timeline suggests hospital officials spent at least a day working to isolate the problem internally before confirming to the public that it was a cybersecurity breach rather than an ordinary technical failure.
Helpline and Forensic Investigators Brought In
In an incident update posted the same day, Luminis Health said it had established a dedicated patient helpline, 443-222-0193, and had engaged legal counsel along with third-party cybersecurity specialists to conduct a forensic investigation and restore the affected systems. The health system acknowledged that key questions remain unresolved, including whether sensitive patient records were compromised and how long full restoration will take.
Luminis Health has not said whether patient data was accessed or exfiltrated during the incident. Under Maryland's Personal Information Protection Act, entities that experience a security breach must notify affected state residents and the Maryland Attorney General within 45 days of discovery, according to Constangy. That statutory clock would only start running if investigators determine protected personal information was in fact accessed.
A Rough Few Weeks for Luminis Health
The cyber incident lands just two weeks after both Anne Arundel Medical Center and Doctors Community Medical Center were placed on temporary Code Black lockdowns following an unverified telephoned threat, as Hoodline reported at the time. The back-to-back disruptions mark a period of heightened security challenges for the health system, which formed through a 2019 merger of Anne Arundel Health System and Doctors Community Health System and now operates nearly 790 licensed beds with more than 6,100 employees across eight Maryland counties.
This is not the first time Luminis Health has dealt with a major cybersecurity breach. An email hacking incident at Anne Arundel Medical Center in November 2021 exposed the protected health information of 824,450 individuals, according to records kept by the U.S. Department of Health and Human Services Office for Civil Rights. That history places the current incident within a broader pattern of digital vulnerability at the hospital system.
Part of a Nationwide Surge in Hospital Cyberattacks
The disruption at Luminis Health also fits into a troubling national trend. U.S. healthcare organizations reported a record 772 large data breaches to federal regulators in 2025, exposing protected health information for roughly 138.5 million people, according to federal data analyzed by Compliancy Group. Healthcare data breaches now cost an average of $6.64 million per incident, according to figures reported by Stingrai, keeping the sector in the unwelcome position of the most expensive industry for data breaches for 13 consecutive years running.
Anne Arundel Medical Center is a flagship facility for the region, ranked No. 8 among Maryland hospitals and No. 6 in the Baltimore region by U.S. News & World Report for 2024–2025, with national recognition for its maternity services announced in December 2025. Meanwhile, Luminis Health has been investing heavily in expansion, including an April groundbreaking for a 67,000-square-foot Women's Health Pavilion at the Lanham campus, a project Hoodline covered that is meant to restore inpatient obstetrics to northern Prince George's County by 2028. Those capital projects underscore how much is riding on the health system's ability to keep its digital infrastructure secure while it continues to expand patient services.
For now, Luminis Health has not indicated when the affected systems, including the online patient portal, will be fully restored. Patients with questions about appointments or care during the outage have been directed to call the helpline the health system set up this week while forensic specialists continue their investigation.
