Luminis Health

Annapolis-based Luminis Health serves 1.8 million patients across eight counties.

Cyberattack Date

Cybercriminals attacked Luminis Health on August twenty-third.

Ransom Target

Attackers sought direct payday leverage over Luminis Health.

Expert Insight

Nate Apathy, University of Maryland professor, said attackers want 'pay us however much Bitcoin' leverage.

“We’ve crippled your system. Pay us however much Bitcoin, or whatever, and we’ll allow you to have your system back, and we won’t do anything nefarious”

System Status

Emergency rooms open, surgeries ongoing, phones working but patient records in read-only mode.

Luminis Silence

Luminis Health hasn’t detailed what happened or its response to the attack.

MyChart Attack

Epic Systems’ MyChart app locked out patients and providers after phishing campaign.

“Some might try to steal your login information or promise free gifts if you enter payment details”

Attack Pattern

Cyberattack likely different from summer phishing campaign targeting MyChart.

System Chain

Luminis’ expansion created daisy chain of healthcare systems vulnerable to attack.

Breach Impact

Ransomware attacks increase hospital mortality for patients already admitted.

“Ransomware attacks increase in-hospital mortality for patients already admitted to ransomware-attacked hospitals when the attack begins, compared to patients whose admissions concluded in the five weeks prior”

Current Response

Luminis working with cybersecurity firms but has plans for IT system recovery.

No National Policy

No U.S. national policy exists to improve hospital cybersecurity.