Patient Sues Anne Arundel Medical Center Over Cyberattack Fallout

On September 11, 2026, Jokisha White, a former patient of Anne Arundel Medical Center, filed a lawsuit that could send ripples through the region’s health‑care landscape. She alleges that Luminus Health, the system that owns the hospital, left her—and dozens of others—exposed to “certainly impending” fraud after a cyberattack knocked out critical medical records.

The breach first surfaced in early September when the health system warned patients that its phone network and online portals were down. At the time, the notice was brief, almost curt, and many patients were left scrambling for answers. While the telephone system was reportedly back up within days, the MyChart portal—where patients view lab results, medication lists, and appointment details—remained offline, deepening the frustration.

White’s complaint claims the parent company failed to put basic data‑breach safeguards in place, a lapse that she says put her personal health information at risk of theft and misuse. In her filing, she paints a picture of a hospital more focused on restoring a phone line than on protecting the privacy of the people it serves.

Luminus Health operates not only the Annapolis‑based Anne Arundel Medical Center but also a second hospital in Lanham, plus two outpatient surgery centers in Annapolis and Pasadena. The cyberattack, according to reports, hit both sites, though the full extent of the damage is still being untangled by IT forensics teams.

Hospital officials have been relatively quiet beyond confirming that the phone system is functional again. They have yet to comment on the status of the MyChart platform or the specifics of the lawsuit. Meanwhile, patients are left watching their health data sit in a digital limbo, hoping the hospital can patch the breach and restore trust.

The case adds to a growing list of healthcare cyber‑incidents across Maryland, prompting lawmakers and regulators to scrutinize how hospitals safeguard electronic health records. For now, White’s legal action serves as a stark reminder that when technology fails, real people bear the consequences.