Home / Health / Health System Sued Over Data Breach
Health System Sued Over Data Breach
17 Sep
Summary
- Luminis Health faces lawsuit over data breach negligence.
- Patient data allegedly stored unencrypted online.
- Tens of thousands potentially affected by the breach.

Luminis Health, which serves over 1.8 million patients across Maryland, is currently responding to a cybersecurity incident that impacted certain systems. A lawsuit has been filed by patients alleging the health system's parent company, Luminis Health, negligently failed to protect their medical information.
The complaint asserts that patient data was stored in an unencrypted, internet-accessible environment. This alleged vulnerability puts patients at risk of fraud and privacy violations that could last a lifetime. Two additional residents joined the lawsuit, which aims to become a class-action case potentially involving tens of thousands of individuals.
Luminis Health stated on September 1 that it was addressing the cybersecurity incident and has since reported considerable progress in restoring affected systems, with phone services back online. The health system assures that hospitals, clinics, and physician practices remain operational, continuing with surgeries and patient care. An investigation is ongoing to determine the full impact on patient information.