Mainline Health Systems Inc, a healthcare provider based in Southeast Arkansas, experienced a data breach on or about April 10, 2024 affecting 101,104 individuals across the United States. The cybersecurity incident involved unauthorized access to sensitive patient information, with both personally identifiable information (PII) and protected health information (PHI) exposed.
On May 21, 2025 discovered that compromised included full name, date of birth, Social Security Number, U.S. driver’s license number, financial account and payment card numbers, medical record number, patient ID, Medicaid number, health insurance policy and group numbers, medical diagnosis and treatment details, clinical and prescription information, provider location and provider name.
The breach was disclosed to the Maine and Massachusetts Attorney Generals' offices on June 23, 2025, reporting one Maine resident and seven Massachusetts residents affected. The cybersecurity incident was reported to the Texas Attorney General's office on June 30, 2025, with 428 Texas residents affected.
Mainline Health Systems also published a Notice of Data Security Incident on its own website.
Mainline Health Systems Inc began notifying individuals affected by the data breach on June 20, 2025. Patients who may have had their Social Security number exposed are being offered free credit monitoring services.
If you receive notification from Mainline Health Systems about this breach, you may want to:
Mainline Health Systems has set up a response line for affected individuals with questions at 1-855-201-4160, available Monday through Friday 8:00 a.m. to 8:00 p.m. Central Time.
For more information about the organization, visit the Mainline Health Systems website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.