The Cooper Health System, also known as Cooper University Health Care, discovered that it had experienced a data breach affecting the personal information of tens of thousands of individuals. The breach was first identified on March 26, 2025, after an investigation into suspicious network activity that began in May 2024. While the unusual activity did not disrupt access to Cooper’s systems, it prompted immediate action to secure their environment and launch a comprehensive investigation with the help of independent cybersecurity experts.
The investigation revealed that an unauthorized actor may have acquired certain data stored in Cooper’s systems. After a thorough review of the affected files, Cooper determined that the breach exposed sensitive information, including names and Social Security numbers. According to the official disclosure to the Maine Attorney General’s office, a total of 57,412 people in the United States were impacted by this incident, with one individual in Maine receiving direct notification.
For those affected, Cooper is offering complimentary credit monitoring and identity protection services through IDX. These services include up to 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery support. Impacted individuals are encouraged to enroll in these services by August 23, 2025, using the instructions and enrollment code provided in their notification letter.
If you have received a notification from Cooper, it is important to:
Cooper has provided a dedicated phone number and website for questions and enrollment, as outlined in the official notice to consumers, which will be available on this page in PDF format.
For more information, visit Cooper Health System’s website.