# University Hospitals (Cleveland) takes systems offline after "unusual activity" (unconfirmed) · pwn.watch

> University Hospitals in Cleveland detected unusual activity on its servers on Oct 22 2026 and disconnected systems from the internet as a precaution. MyChart, the public website and other digital services went down and some appointments and elective procedures were rescheduled; UH says patient care continues. UH has not said whether it was a cyberattack or whether patient data was accessed, and expects disruption into the following week. Still under investigation.

Page: https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026 · generated 2026-10-24T08:44:16.553Z

## Status
- Severity: unknown · status: live · patch: no-fix-needed
- Product: University Hospitals (Cleveland, Ohio) IT systems
- Started: 2026-10-22
- Affected: University Hospitals digital services (MyChart, website)

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026/feed.xml
- JSON Feed: https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026.json
- This file: https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026/llms.txt

## Updates (newest first)
- 2026-10-23: MyChart and websites remain down; some appointments are rescheduled; UH begins reconnecting some partners and expects impact into next week. Cause not confirmed. (https://www.ideastream.org/health/2026-10-23/university-hospitals-websites-mychart-down-after-unusual-activity-on-servers)
- 2026-10-22: UH detects unusual activity on its servers and disconnects systems from the internet. (https://www.wkyc.com/article/news/local/cleveland/university-hospitals-disconnects-online-systems-internet-unusual-activity-servers-response-protocols-digital-services/95-7bb4c9a2-7fdc-4a27-8d65-cf9a15932ed5)

## Fix brief
# Security brief: University Hospitals (Cleveland) takes systems offline after "unusual activity" (unconfirmed)

Source: https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026 · status: live · severity: unknown · updated Oct 24, 2026, 06:40 UTC

## Patch status
**NO FIX NEEDED: no action on your side beyond verification.**

## What it is
University Hospitals in Cleveland detected unusual activity on its servers on Oct 22 2026 and disconnected systems from the internet as a precaution. MyChart, the public website and other digital services went down and some appointments and elective procedures were rescheduled; UH says patient care continues. UH has not said whether it was a cyberattack or whether patient data was accessed, and expects disruption into the following week. Still under investigation.

Severity detail: Unconfirmed: suspected cyber incident under investigation; no data access confirmed

- Product: University Hospitals (Cleveland, Ohio) IT systems

## Affected versions
- University Hospitals digital services (MyChart, website)

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Latest updates
- Oct 23, 2026: MyChart and websites remain down; some appointments are rescheduled; UH begins reconnecting some partners and expects impact into next week. Cause not confirmed.
- Oct 22, 2026: UH detects unusual activity on its servers and disconnects systems from the internet.

## Write-ups & news
- [University Hospitals disconnects online systems after detecting 'unusual activity' on servers](https://www.wkyc.com/article/news/local/cleveland/university-hospitals-disconnects-online-systems-internet-unusual-activity-servers-response-protocols-digital-services/95-7bb4c9a2-7fdc-4a27-8d65-cf9a15932ed5)
- [University Hospitals websites, MyChart down after 'unusual activity' on servers](https://www.ideastream.org/health/2026-10-23/university-hospitals-websites-mychart-down-after-unusual-activity-on-servers)
- [University Hospitals takes IT systems offline after 'unusual activity'](https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/university-hospitals-takes-it-systems-offline-after-unusual-activity/)

## Caveats
Unconfirmed and still being investigated: UH has not called it a cyberattack and has not reported data access. Update or close once UH says more.

---
Machine-readable: https://pwn.watch/i/university-hospitals-cleveland-systems-offline-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.