University Hospitals Restores MyChart Access After Cyber Incident

University Hospitals restored access to its MyChart patient portal on Saturday. This ended a digital shutdown that began when the Ohio health system detected unusual activity on its servers on October 22, 2026.

The network disruption forced the 21-hospital health system to disconnect its digital infrastructure from the internet as a precautionary measure while investigating a cybersecurity threat, as reported by The HIPAA Journal.

Online prescription renewals, test results, telehealth appointments, and bill payments were taken offline across the system. The 21-hospital health system implemented containment measures and activated response protocols after identifying the incident on October 22, 2026.

The entity has kept specifics about the security event private. It remains unstated whether any unauthorized parties gained entry to patient data.

University Hospitals faces a proposed class-action lawsuit. The lawsuit alleges that personal information was compromised during the cybersecurity incident and that it failed to implement reasonable cybersecurity safeguards or policies to protect patients’ sensitive information.

Under federal rules, the Department of Health and Human Services must be notified within 60 days of data breaches endangering personal health information. University Hospitals has yet to submit this filing.

Alongside University Hospitals, cybersecurity incidents have also been announced by EyeMed Vision Care and Facial Surgery Group.

While the MyChart portal is accessible again, public relations manager Ansley Kelm noted that some features might experience slight delays as data is reconciled, according to Ashland Source.

Hospital officials stated that emergency departments, physician offices, and main hospitals remained operational throughout the incident.

University Hospitals thanked employees for maintaining patient care during the disruption.

Internal emails reviewed by Ideastream Public Media show that employees were instructed to reset passwords and continue adapting their daily procedures.

MyChart back online at University Hospitals after cybersecurity incident pic.twitter.com/rJ7dYcCDGX

— Post by @cleveland19news on X

Patients managing ongoing care faced altered administrative routines while servers were down. Doctors relied on manual procedures, handwriting and faxing prescriptions, while staff contacted patients by phone for appointment reminders, as detailed by The Observer.

UH assured the public that the cybersecurity event left its telephone network fully functional.

The system advised individuals to watch out for fraudulent communications. The health system never solicits passwords, complete Social Security numbers, or other confidential data via call, text, or email.

It was a 20-minute wait on music waiting for them to actually answer the phones, Bloomfield said of reaching the health system during the disruption, according to News 5 Cleveland WEWS.

University Hospitals engaged external investigators and worked alongside law enforcement to examine the incident.

Cory Scott is the executive director of the Cybersecurity Center at Cleveland State University’s College of Law. He told Ideastream that healthcare recovery times average roughly sixteen and a half days during such security events due to methodical lockdown and containment protocols.

Pointing out that numerous outside security consultants face heavy workloads and limited capacity, Scott noted that medical institutions typically isolate vulnerable networks to halt breaches and minimize further destruction.

This is an important milestone, Kelm said, pointing to the restoration of the patient portal as a sign of recovery for the healthcare network, according to Ashland Source.