University Hospitals systems remain offline after cyberattack, no timeline
University Hospitals, a 21-hospital health system in Cleveland, Ohio, identified a cyberattack on October 22, 2026 and took digital services offline, including the MyChart patient portal. A November 2, 2026 update confirmed systems remain offline with no timeline for restoring normal operations. Hospitals and emergency departments remain open, but pre-authorizations are disrupted and some elective procedures were rescheduled; the extent of patient data involvement is still undetermined.
What happened
University Hospitals, a 21-hospital health system in Cleveland, Ohio, identified a cyberattack on October 22, 2026 and took digital services offline, including the MyChart patient portal. A November 2, 2026 update confirmed systems remain offline with no timeline for restoring normal operations.
Why it matters
Hospitals, emergency departments, and physician offices remain open, but pre-authorizations are disrupted and some appointments and elective procedures have been rescheduled. The system has not yet determined the extent of patient data involvement, leaving the risk of health information exposure open.
What to do
Follow University Hospitals' official channels for care and rescheduling guidance. Patients and partners should monitor communications from the system and await investigation findings on data.
For the technical team
- Affected
- University Hospitals, sistema de saúde de Cleveland (EUA) com 21 hospitais; serviços digitais, incluindo o portal do pac · Digital services of University Hospitals, a 21-hospital system in Cleveland, Ohio, including the MyChart patient portal.
- Exploitation
- No ransomware group has claimed responsibility, according to HIPAA Journal. Exploitation status has not been disclosed by the system.
- Fix
- No patch applies. The system is working on safely restoring affected services, with no timeline provided.
- Vector
- Not disclosed. The source does not say whether ransomware was involved or what the entry vector was. Containment included taking digital services offline, including the MyChart portal.
- More details
- Attack identified on October 22, 2026; incident response protocols were activated. A November 2, 2026 update confirmed systems remain offline. Investigation ongoing; the extent of patient data involvement is not yet determined. The same source reports separate cybersecurity incidents at EyeMed Vision Care of Cincinnati and Facial Surgery Group.
Timeline
Incident opened.
