Central Maine Healthcare is notifying over 145,000 patients that their personal, treatment, and health insurance information was compromised in a data breach.
The incident, the healthcare provider says, was discovered on June 1, 2025, after detecting unusual activity on its IT network.
However, the intrusion spanned several months, between March and June 2025, the organization said in an incident notice.
With help from third-party cybersecurity experts, the organization completed its investigation into the attack on November 6.
The compromised information, Central Maine Healthcare says, includes names, dates of birth, Social Security numbers, treatment details, provider names, dates of service, and health insurance information.
Central Maine Healthcare says it started notifying the potentially affected individuals on July 31, and that the latest round of notifications went out on December 29.
The healthcare organization also established a dedicated, toll-free incident response line to provide the impacted individuals with additional details on the incident.
Additionally, Central Maine Healthcare is providing the impacted individuals with one year of credit and identity theft monitoring services that include dark web monitoring.
However, the incident was listed on the Maine Attorney General’s Office portal only this week, and the number of impacted individuals was revealed to have reached 145,381.
The healthcare provider says it enhanced its monitoring and alerting capabilities to prevent similar incidents and advises potentially affected individuals to review the statements received from healthcare providers and health insurance plans.
Central Maine Healthcare operates several facilities in Maine, including the Central Maine Medical Center in Lewiston, and Bridgton and Rumford hospitals. In 2025, it was acquired by Prime Healthcare Foundation.
Related: Traveler Information Stolen in Eurail Data Breach
Related: Robo-Advisor Betterment Discloses Data Breach
Related: After Goldman, JPMorgan Discloses Law Firm Data Breach
Related: 377,000 Impacted by Data Breach at Texas Gas Station Firm
