# Cleveland's University Hospitals Reports Cyber Disruption

University Hospitals (UH) said that about two weeks after detecting unusual server activity on October 22, it still had no estimated restoration date for its public websites and MyChart. Its clinician intranet remained operational. UH had not disclosed whether patient information was accessed and had not made a breach disclosure to HHS. The incident underscores the need for healthcare incident response, system recovery, and continuity-of-care capabilities, but no solicitation or confirmed procurement has been identified.

- Healthcare IT and cybersecurity firms may view the disruption as a market signal for incident response and recovery services, not as an active UH contract opportunity.
- Procurement teams evaluating continuity plans can note the distinct system impacts reported: public websites and MyChart were unavailable while the clinician intranet remained operational.
- UH has not disclosed whether patient information was accessed or reported a breach to HHS, so the signal does not establish a confirmed disclosure or resulting procurement.

**Jurisdictions:** sled
**Industries:** Healthcare, Information Technology
**Topics:** Cybersecurity
**Published:** November 06, 2026

### Government Entities
- U.S. Department of Health and Human Services (HHS)

### Sources
- [Two weeks after cybersecurity breach, UH says it's unclear when systems will be restored | Ideastream Public Media](https://www.ideastream.org/health/2026-11-06/two-weeks-after-cybersecurity-breach-uh-says-its-unclear-when-systems-will-be-restored) - Ideastream