Breaches and incidents
University Hospitals (Cleveland, Ohio): systems disconnected from internet after unusual server activity, MyChart offline
UH said “On Thursday, Oct. 22, 2026, we detected unusual activity on University Hospitals servers” and disconnected its systems from the internet.
- Disclosed
- Verification
- Checked against a primary source
What happened
- UH said “On Thursday, Oct. 22, 2026, we detected unusual activity on University Hospitals servers” and disconnected its systems from the internet; certain digital services including MyChart remain offline, lab results cannot be viewed in MyChart, and on 26 Oct UH said some appointments and elective procedures were moved (Cleveland 19).
- Root cause: not disclosed; UH has not called it a cyberattack or mentioned ransomware.
- No attacker named.
- UH says the “vast majority of appointments and procedures have continued as normal”, it is investigating with outside experts and is in communication with law enforcement (Cleveland 19); no restoration timeline and no statement on whether patient data was accessed.