Covenant Health Data Breach Impacts 478,000 Individuals

Covenant Health, an Andover, Massachusetts-based provider, disclosed that a data breach discovered in May 2025 affected more than 478,000 individuals, with the updated figure later stated as 478,188. The incident involved the Qilin ransomware group, which claimed to have stolen more than 1.3 million files and 850 GB of data from Covenant Health’s systems following an attack on 18 May 2025; the intrusion was detected on 26 May 2025, and the investigation concluded in December.

According to the Maine Attorney General’s Office, Covenant Health initially reported 7,800 impacted individuals in July, but the updated notification on 31 December revealed the higher total. The information exposed included names, dates of birth, addresses, SSNs, medical record numbers, health insurance information, and treatment details. The group has made data public, and Covenant Health indicated that a ransom has not been paid. Covenant Health operates across more than a dozen locations in Massachusetts, Maine, New Hampshire, Pennsylvania, Rhode Island, and Vermont.