Threats
Healthcare Cyber Downtime: Protecting Patient Safety When Phones and Portals Fail
A healthcare cyber-downtime response guide focused on clinical continuity, telephony and portal outages, evidence preservation, authenticated patient communications, and safe restoration.
The Luminis Health status update illustrates how a cybersecurity incident can disrupt patient communication even while hospitals remain open. Healthcare organizations need clinical downtime procedures that preserve patient safety, reliable public communication, and forensic options at the same time.
Keep patient-safety workflows usable during outages
Validate downtime procedures for patient identification, appointment confirmation, medication and allergy checks, laboratory-result retrieval, referral communication, and escalation when portals or telephony are unavailable.
Prepare paper forms and alternate contact paths before an outage. Keep patient-safety operations distinct from forensic containment so urgent clinical work can continue safely.
Use authenticated communications channels
Publish patient instructions only through authenticated public channels and known contact details. Provide clear, practical alternatives when online portals or phone systems are unavailable.
Warn patients and staff that incident-related disruption can create opportunities for impersonation. Unexpected calls, texts, or emails seeking personal or financial information should be verified independently.
Preserve evidence and restore through clean pathways
Preserve logs, system images, decisions, and restoration checkpoints while incident response continues. Stage restoration through clean networks and verify services before returning them to patient use.
Avoid claiming data exposure, actor attribution, or a restoration date without evidence. The report states that Luminis had not publicly established whether patient information was affected or identified the actor.