
On June 1, 2025, Central Maine Healthcare detected unusual activity in its information technology network, prompting an immediate shutdown of its IT systems, phones and network servers. An investigation determined that a cybercriminal accessed Central Maine Healthcare's IT environment between March 19, 2025, and June 1, 2025.
A review revealed that the unauthorized actor may have accessed or acquired files containing patient personal and protected health information. Compromised information includes names, dates of birth, Social Security numbers, treatment information, dates of service, provider names, medical information and health insurance details.
Central Maine Healthcare published a Notice of Data Security Incident on its website on July 31, 2025, and an updated notice on Dec. 31, 2025. The organization began notifying impacted patients by mail on July 31, 2025.
The data breach was also disclosed to the U.S. Department of Health and Human Services and the Maine Attorney General's office on July 31, 2025. The Maine Attorney General's disclosure was updated on January 12, 2026, to reflect a total of 145,381 affected individuals, including 138,800 residents of Maine.
Central Maine Healthcare has implemented enhanced monitoring and alerting software across its IT systems. The organization is also offering 12 months of free TransUnion three-bureau credit monitoring services. This includes access to credit reports and scores, fraud assistance and up to $1 million in identity theft insurance.
If you receive notification from Central Maine Healthcare, you may want to:
For impacted individuals, Central Maine Healthcare has set up a dedicated call center at 833-397-7918, Monday through Friday, 8 a.m. to 8 p.m. ET.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)