Cleveland-based University Hospitals said its MyChart patient portal and other internet-linked systems remain offline after unusual activity was detected on its servers on Oct. 22, 2026, and it still has no estimated date to restore them^1,2,3.

The health system said it activated response protocols and disconnected systems from the internet as a precaution¹. A Nov. 2 update on its cybersecurity incident page said hospitals, emergency departments and physician offices remain open and that caregivers continue to provide care, but it does not currently have an estimated timeline for completion^1,3.

News 5 Cleveland reported Friday that, two weeks after the incident, some patients said they still cannot view visit notes, renew prescriptions online or message doctors through MyChart, and that some face long waits when calling for help². University Hospitals told patients to contact their doctor's office directly about results, appointments or medications, and not to call only to verify existing appointments unless a care team reaches them^1,2.

HIPAA Journal, citing the same Nov. 2 notice, described University Hospitals as a 21-hospital system and said the incident has disrupted pre-authorizations, with some appointments and elective procedures rescheduled³. UH said the vast majority of appointments and procedures have continued, video visits are being moved to phone, Zoom or in-person, and clinicians still have access to test results even if those results may be delayed^1,3.

Lab results cannot be viewed in MyChart while the portal is down; UH said patients whose tests were done through Quest Diagnostics can use Quest's website, while UH specialty-lab and inpatient results are available only in MyChart or through a doctor¹. Outpatient pharmacies remain open, and UH said providers can print, fax or call in prescriptions when electronic prescribing is unavailable¹.

UH said most applications on its isolated servers still work internally but cannot send or receive information outside the system, so payment at the time of service is not possible at its cashless facilities¹. It directed patients who want to pay to an automated phone line or an online payment page, and said its phone system itself was not affected even as call volumes are high¹.

UH said it will not call or text asking for banking information and warned patients to treat such requests as scams^1,2. HIPAA Journal reported that UH has not publicly said whether ransomware was involved, that no ransomware group appeared to have claimed the incident, and that the system has not determined the extent to which patient data was involved³.

What remains unknown is when MyChart will return, whether patient records were copied, and the technical nature of the Oct. 22 activity^1,3.