Central Maine Healthcare data breach impacted over 145,000 patients

According to Central Maine Healthcare’s notice of data security incident, a cyberattack exposed the personal, medical and insurance data of about 145,000 patients. The organisation detected unusual activity on 1 June 2025 and said an unauthorized party accessed its IT systems between 19 March 2025 and 1 June 2025, potentially accessing names, dates of birth, treatment details, provider names and health insurance information, with Social Security numbers involved for some patients.

The data breach notice shared with the Maine Attorney General’s Office reports that 145,381 individuals were affected. The investigation concluded on 6 November 2025, and the company stated it had implemented enhanced monitoring and alerting software to protect and monitor its systems. Affected individuals are being offered free credit protection services for 12 months, including single-bureau credit monitoring, credit reports and scores, with same-day alerts, delivered by Cyberscout, a TransUnion company.

Central Maine Healthcare advised patients to review medical and insurance statements for unfamiliar services and to contact their provider or insurer promptly if anything seems suspicious.