Back Cbsnews

Luminis Health sued over alleged failure to protect patient data after cyberattack

Cbsnews • September 17, 2026

A patient of Anne Arundel Medical Center alleges in a lawsuit that the hospital's parent company, Luminis Health, negligently failed to protect their medical information following a cybersecurity incident earlier this month, a ccording to our media partner, The Baltimore Banner .

The lawsuit claims the breach occurred because Luminis Health stored patient data in "an unencrypted, Internet-accessible environment."

According to The Banner, Jokisha White filed the complaint on Sept. 11, arguing that she and others affected by the breach face a "certainly impending" risk of fraud, "intrusion of their health privacy" and other risks that "may last for the rest of their lives."

The Banner reports that two other Anne Arundel County residents, Rachel Rogers and Angela Ritchie, joined the lawsuit Wednesday and are seeking to make it a class-action case.

The lawsuit says "tens of thousands" of people could be eligible to join the class action. It asks Luminis Health to provide at least 10 years of credit monitoring and pay monetary damages, according to The Banner.

Luminis Health serves more than 1.8 million patients on Maryland's Eastern Shore and in Anne Arundel and Prince George's counties, according to its website. The health system operates Anne Arundel Medical Center in Annapolis and Doctors Community Medical Center in Lanham.

Luminis Health posted an alert on its website Sept. 1 saying it was "responding to a cybersecurity incident affecting certain systems across our organization."

On Wednesday, Luminis Health said it was making "considerable progress in restoring affected systems." Telephone services have been restored across all Luminis Health locations.

The health system said its hospitals, physician practices and clinics remain open and are seeing patients. Surgeries and baby deliveries are also continuing.

Luminis Health said an investigation is ongoing to determine whether patient information was impacted. The health system said it is working "around the clock to restore remaining impacted systems" and "testing those systems for safety and quality as they are being restored."

For more information, visit the Luminis website here .

Featured Local Savings

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Luminis Health Faces Lawsuit Over Data Breach Exposing Patient Information Luminis Health, the parent company of Anne Arundel Medical Center, is being sued for negligence following a data breach that exposed patient medical information on September 4, 2026. The lawsuit, filed by Jokisha White and joined by two other plaintiffs, claims that Luminis stored sensitive data in an unencrypted, Internet-accessible environment, putting potentially tens of thousands of patients at risk of fraud and privacy intrusion. The plaintiffs are seeking to convert the lawsuit into a class action and are requesting at least 10 years of credit monitoring and monetary damages. Luminis Health has acknowledged the breach and is currently investigating the incident, while also working to restore affected systems. The health system serves over 1.8 million patients across Maryland. As of September 17, 2026, Luminis has restored phone services but its online patient portal remains offline. 2 sources 55

Extracted Entities

Luminis Health sued over alleged failure to protect patient data after cyberattack

The full story

Extracted Entities

Attack Types (1)

Companies (3)

CWE Weaknesses (1)