Luminis Health Faces Lawsuit Over Data Breach Exposing Patient Information

• •Luminis Health is sued for negligence after a data breach exposing patient information.
• •The breach occurred due to unencrypted data stored in an Internet-accessible environment.
• •The lawsuit seeks class action status for potentially tens of thousands of affected patients.

Luminis Health, the parent company of Anne Arundel Medical Center, is being sued for negligence following a data breach that exposed patient medical information on September 4, 2026. The lawsuit, filed by Jokisha White and joined by two other plaintiffs, claims that Luminis stored sensitive data in an unencrypted, Internet-accessible environment, putting potentially tens of thousands of patients at risk of fraud and privacy intrusion. The plaintiffs are seeking to convert the lawsuit into a class action and are requesting at least 10 years of credit monitoring and monetary damages. Luminis Health has acknowledged the breach and is currently investigating the incident, while also working to restore affected systems. The health system serves over 1.8 million patients across Maryland. As of September 17, 2026, Luminis has restored phone services but its online patient portal remains offline.