AMHC Ransomware Attack Affects Operations: Compromised Data Currently Unknown

Aroostook Mental Health Services Inc., a nonprofit behavioral health provider in northern Maine, disclosed that it recently experienced a ransomware attack that disrupted some of its business operations. The total number of individuals potentially affected by the incident has not been disclosed.

AMHC posted a public notice about the incident on its Facebook page on March 26, 2026, alerting the community to the disruption. The breach was additionally disclosed to the Maine Attorney General.

The organization stated that its investigation into the scope of potentially affected data remains ongoing and that it would update relevant parties as appropriate.

What happened in the Aroostook Mental Health Services data breach

AMHC experienced a network disruption caused by a ransomware attack. According to the organization's notice, the incident affected some of its business operations and resulted in a temporary interruption to some of its connectivity.

On March 12, 2026, AMHC noticed signs of a disruption to its computer network. AMHC launched an investigation with the help of specialists to restore its systems and understand the nature and scope of the disruption.

On March 21, 2026, AMHC discovered that its network was accessed between March 11 and March 12, 2026, and that certain files containing personal information were accessed and copied without authorization.

The specific types of information that may have been accessed or taken have not yet been determined. The investigation into the full scope of the incident remains ongoing.

On March 24, 2026, Qilin posted AMHC's name on a dark web site hosted on the Tor network, claiming to have obtained the organization's data. AMHC acknowledged in its notice that it was aware its name had been posted on the dark web.

AMHC's response to the breach

AMHC advises individuals to remain vigilant for suspicious activity and to avoid sharing information with unknown or unverified sources.

AMHC is providing 12 months of complimentary credit monitoring and identity protection services for potentially affected individuals. More information concerning this can be found on the affected individual's notification letter.

Individuals with questions can contact AMHC's main office at 207-498-6431.

Steps to take if your information was exposed

Because the investigation is still ongoing and the types of affected data have not been confirmed, individuals connected to AMHC may want to take precautionary steps to protect themselves.

• Review credit reports regularly by requesting free copies at AnnualCreditReport.com and checking for any unfamiliar accounts or inquiries that could signal misuse of personal information.
• Consider placing a fraud alert or credit freeze with Equifax, Experian and TransUnion to help prevent unauthorized accounts from being opened.
• Watch for phishing attempts that reference Aroostook Mental Health Services, AMHC or this breach by name, as scammers often use breach notifications to trick people into sharing personal details.
• Review health insurance statements carefully for any services or claims that were not authorized, which could be a sign that health information has been misused.
• Be cautious of unsolicited communications asking for personal, financial or health information, especially from callers, emails or text messages from unknown or unverified sources.