Annapolis, Md.-based Luminis Health has restored its systems after a cybersecurity incident that began Sept. 1, the health system said in an Oct. 8 update.
Luminis Health’s hospitals, physician practices and other care locations continue to see patients. Teams are still reconciling and entering documentation from patient encounters during the downtime, when the two-hospital network relied on paper records. Some notes, lab results and imaging results may not yet appear in MyChart.
The investigation is still underway. Forensic specialists are reviewing systems and information to determine the full nature and scope of the incident, and Luminis Health has not identified who was responsible. “We want to ensure that any information we share is based on confirmed findings,” the health system said.
If the investigation finds that individuals’ information was affected and notification is required, Luminis Health said it will notify them and share information about resources and next steps.
The health system said it worked with third-party cybersecurity experts throughout the response and recovery. It tested and validated systems as they came back online, and it continues to evaluate its technology environment and security practices.
Patient payment plans were paused during the outage and will not become delinquent, Luminis Health said. The organization will reset the plans so they resume without affecting account status.
Luminis Health restored phone service Sept. 16 and MyChart in late September.
