INCIDENT REPORT · CP-2026-011

University Hospitals (Cleveland) Cyberattack

L3 · ELEVATEDCONFIRMED

University Hospitals, a large Northeast Ohio health system, detected unusual activity on its servers on Oct 22, 2026 and disconnected its systems from the internet as a precaution. The system has not disclosed the nature of the attack, whether ransomware was involved, or whether data was accessed; no group has publicly claimed it.

Incident ID: CP-2026-011
Incident date: 22 OCT 2026
Detection date: 22 OCT 2026
Affected countries: United States
Plotted location: Cleveland, United States (Affected organization headquarters)
Threat classification: Level 3 — ELEVATED
Classification rationale: Weeks-long IT disruption at a major regional health system affecting patient services.
Attack type: Infrastructure Compromise
Nature: Malicious activity
Attack vector: Not publicly documented
Sectors: Healthcare
Critical infrastructure: Yes
Organizations affected: University Hospitals (Cleveland, Ohio)
Operational consequences: Hospitals and emergency departments stayed open, but pre-authorizations were disrupted, some appointments and elective procedures were rescheduled, point-of-service payments were unavailable, and the MyChart patient portal was offline until about Nov 7 (16 days). Proposed class-action lawsuits have been filed.
Estimated financial impact: No reliably documented figure
Attribution (as stated): No official attribution recorded

SOURCE REFERENCES

RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.

University Hospitals (Cleveland) Cyberattack

L3 · ELEVATEDCONFIRMED

Incident ID

CP-2026-011

Incident date

22 OCT 2026

Detection date

22 OCT 2026

Affected countries

United States

Plotted location

Cleveland, United States (Affected organization headquarters)

Threat classification

Level 3 — ELEVATED

Classification rationale

Weeks-long IT disruption at a major regional health system affecting patient services.

Attack type

Infrastructure Compromise

Nature

Malicious activity

Attack vector

Not publicly documented

Sectors

Healthcare

Critical infrastructure

Yes

Organizations affected

University Hospitals (Cleveland, Ohio)

Operational consequences

Hospitals and emergency departments stayed open, but pre-authorizations were disrupted, some appointments and elective procedures were rescheduled, point-of-service payments were unavailable, and the MyChart patient portal was offline until about Nov 7 (16 days). Proposed class-action lawsuits have been filed.

Estimated financial impact

No reliably documented figure

Attribution (as stated)

No official attribution recorded