Luminis Health faces class-action lawsuit as cyberattack exposes patient data. As Luminis Health continues working to restore systems disrupted for weeks by a cyberattack, the health network is now facing a proposed class action lawsuit fr |!| Baltimore

Luminis Health Data Breach investigation. Migliaccio & Rathod LLP is investigating the Luminis Health Data Breach, impacting an undetermined number of individuals and their personal information. What happened? On September 1, 2026, Luminis Health was named as a victim of a data breach. They are currently conducting an investigation to determine whether files were accessed or acquired by an unauthorized actor. Luminis Health provided a statement on their website on September 16, 2026. Little information is available yet about the nature of the breach or the data that may have been involved, but the affected information is believed to include personal and sensitive data. The Luminis Health Data Breach. Luminis Health recently provided a statement and a notice for patients regarding the data breach on their website. All of the information stolen is likely valuable and dangerous to affected victims. As is likely to be the case with the Luminis Health data breach, in previous cyberattacks, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, to unauthorized credit card applications, to medical services or government services ordered in their name, to their information being posted on the dark web, to a massive uptick in the number of spam text messages, calls and emails received. Are you concerned that you might be affected by the Luminis Health data breach? If you have concerns that you have been affected by this data breach, and/or have experienced suspicious activity since September 1, 2026, Migliaccio & Rathod LLP would like to hear from you. Please complete the contact form on this page, send Migliaccio & Rathod LLP an email at [email protected], or give Migliaccio & Rathod LLP a call at (202) 470-3520. The following will ask for your contact information so that Migliaccio & Rathod LLP may reach you to talk about potential claims. This information is for its records only and will not be shared. By continuing, you consent to the collection of this information for these limited purposes. Did you receive a notification that you were affected by the data breach? Would you like to join its newsletter to receive notifications about other investigations Migliaccio & Rathod LLP is looking into, as well as updates on ongoing cases? By submitting this form, you consent to receive marketing, updates, and informative SMS messages from Migliaccio & Rathod LLP at the email and/or phone number provided. Message & data rates may apply. Message frequency varies. Unsubscribe at any time by replying STOP or Reply HELP for help. Privacy Policy The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches such as this. More information about its current cases and investigations is available on its blog. Data Breach FAQ. I received a notice that my information may have been involved in a data breach. What should I do? Take the notification seriously and read it carefully. It should outline what specific information was affected (e.g., name, Social Security number, legal case data). Even if you believe your risk is minimal, it's best to take proactive steps to protect yourself. What immediate actions should I take? * Monitor your financial accounts - Regularly check your bank, credit card, and online accounts for unauthorized transactions. * Change your passwords - Update passwords for any accounts that may be connected to the breach. Avoid reusing old or similar passwords. Use a password manager if needed. * Set up two-factor authentication (2FA) - Enable 2FA on your email, banking, and other sensitive accounts to add an extra layer of protection. * Place a fraud alert or credit freeze - Contact one of the three major credit bureaus (Equifax, Experian, TransUnion) to place a fraud alert or freeze your credit report. This makes it harder for someone to open new accounts in your name. What is credit monitoring, and how should I use it? Credit monitoring tracks your credit report for changes or suspicious activity. If the organization that was breached offers this service for free, it's highly recommended you enroll. These services can alert you quickly to potential fraud. How long do I need to stay vigilant? The effects of a data breach can surface months or even years later. Stay alert to signs of identity theft for at least 12-24 months. Keep an eye on your credit reports, mail, and any unfamiliar account activity. Who can I contact if I need help? Use the contact details provided in the breach notification. You can also report identity theft to the Federal Trade Commission at www.identitytheft.gov for recovery resources.

Luminis cybersecurity incident highlights 'concerning' rise in attacks on healthcare. By Danielle J. Brown Maryland Matters September 9, 2026 Cyberattacks on the healthcare industry, like the one that hit an Anne Arundel County hospital last week, are becoming increasingly common and state-level policymakers should prepare for even more, an expert said Tuesday. "I think it's incumbent upon people who have influence over policy, especially at the state level, to start thinking about what the state can do to improve coordination, to improve readiness, to make sure that when the inevitable happens we are as prepared as we possibly can be," said Benjamin Yelin. He is the public policy and external affairs program director with the University of Maryland, Baltimore's Center for Cyber, Health and Hazard Strategies. His comments come just days after Luminis Health facilities last week announced a "cyber incident by an unauthorized criminal actor" that disrupted certain medical appointments and services. Luminis hospitals remained open while an investigation into the attack continues, but some of their systems were nonoperational, which could impact appointments and services. "As a result of the incident, certain systems are currently unavailable, which may affect some appointments and services. Our teams are working urgently to restore affected systems as quickly and safely as possible," the Luminis notice says. "Our top priority remains providing safe, high-quality care to our patients while responding to this incident," it said. "We understand the concern and inconvenience this disruption may cause, and we sincerely appreciate your understanding and patience with our teams." Luminis did not immediately respond to request for an update on the on the incident or the ongoing investigation. As of Tuesday, the health system's website still warns that patients may be facing disruptions in services due to the incident. But Luminis is just the latest example in what seems to be a rise in cybersecurity threats facing the healthcare industry. FBI data on reported ransomware attacks on "critical infrastructure" in 2025 shows that the healthcare industry was the largest target for ransomware that year, with 460 of 2,118 reported ransomware attacks targeting the the healthcare and public health sphere. "It's a threat that we have to take very seriously," Yelin said. "It's [the Luminis attack] adding to a series of disturbing incidents going back 10 years to the MedStar cyber incident." He's referring to a large ransomware attack in 2016 which included MedStar Health along with municipalities and public institutions across the United States. Attacks on the healthcare sphere have continued since. In 2021, the Maryland Department of Health and local departments faced a ransomware attack that disrupted operations for weeks. And in 2024, a ransomware attack on Ascension hospitals affected facilities in Baltimore. Hospitals and related entities like insurance companies are a favorite target among cybercriminals who find the sensitive and personal health information sheltered in those institutions and hold it for ransom, locking those types of healthcare institutions out of their own systems with a demand for payment. "Hospitals have this enhanced risk. Not only are they interconnected, but just the quality of the data they have makes them more attractive to cyber criminals," Yelin said. Meanwhile, direct interference in the technical infrastructure at hospitals, such as through a denial-of-service attack, can disrupt the medical care at hospitals, and can have ripple effects on other spokes of the healthcare industry. "Any downtime is potentially risking lives. Cybercriminals know that. They know the level of desperation that's so unique to these hospitals," Yelin said. "If there's any kind of delayed treatment, or if you're forcing medical staff to lose access to electronic health records... if there are are delays in lab results, if you can't see the interactions between drug medications, you're going to feel the impacts. "You can understand why this sector is so popular for cybercriminals," he said. Maryland Matters is part of States Newsroom, a network of news bureaus supported by grants and a coalition of donors as a 501(c)(3) public charity. Maryland Matters maintains editorial independence. Was this article valuable? Danielle J. Brown is a new Maryland resident covering health care and equity for Maryland Matters. Previously, she covered state education policy for three years at the Florida Phoenix, along with other topics such as abortion access and LGBTQ+ issues. Born and raised in Tallahassee, Florida, she is a 2018 graduate of Florida State University, where she served as an editorial intern for International Program's annual magazine. She has also contributed stories to Rowland Publishing and reviewed community theater productions for the Tallahassee Democrat. Interested in cyber? Get automatic alerts for this topic.