Central Maine Healthcare Data Breach Exposes Personal Information of 145K Patients

Published
August 1, 2025
Updated
January 19, 2026
Central Maine Healthcare Data Breach Exposes Personal Information of 145K Patients
Central Maine Healthcare

Affected by the

Central Maine Healthcare

data breach?

Join the Lawsuit

On June 1, 2025, Central Maine Healthcare detected unusual activity in its information technology network, prompting an immediate shutdown of its IT systems, phones and network servers. An investigation determined that a cybercriminal accessed Central Maine Healthcare's IT environment between March 19, 2025, and June 1, 2025.

A review revealed that the unauthorized actor may have accessed or acquired files containing patient personal and protected health information. Compromised information includes names, dates of birth, Social Security numbers, treatment information, dates of service, provider names, medical information and health insurance details.

Central Maine Healthcare published a Notice of Data Security Incident on its website on July 31, 2025, and an updated notice on Dec. 31, 2025. The organization began notifying impacted patients by mail on July 31, 2025.

The data breach was also disclosed to the U.S. Department of Health and Human Services and the Maine Attorney General's office on July 31, 2025. The Maine Attorney General's disclosure was updated on January 12, 2026, to reflect a total of 145,381 affected individuals, including 138,800 residents of Maine.

Central Maine Healthcare’s response

Central Maine Healthcare has implemented enhanced monitoring and alerting software across its IT systems. The organization is also offering 12 months of free TransUnion three-bureau credit monitoring services. This includes access to credit reports and scores, fraud assistance and up to $1 million in identity theft insurance.

If you receive notification from Central Maine Healthcare, you may want to:

  • Sign up for the free credit monitoring services, offered by the organization.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

For impacted individuals, Central Maine Healthcare has set up a dedicated call center at 833-397-7918, Monday through Friday, 8 a.m. to 8 p.m. ET.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
December 29, 2025
Date of Breach
June 1, 2025
Breach Discovered Date
June 1, 2025
Total People Affected
145000
Information Types Exposed
  • Social Security numbers
  • Diagnostic information
  • Health insurance information
  • Dates of birth
  • Dates of service
  • Driver’s license numbers
  • Names
  • Provider names
  • Treatment information
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image