Central Maine Healthcare reports data breach impacting patient care
Learn More
Central Maine Healthcare hospital system is reporting a data breach that resulted in nearly a month-long shutdown of computer systems and disruptions to patient care operations.
The breach was detected on June 1, 2025. Hospiral officials immediately took systems offline as a precautionary measure. The system shutdown affected all IT applications, hardware, network servers, and phone systems across the entire network, forcing the organization to operate on manual downtime procedures for nearly a month.
The investigation confirmed that hackers gained access to Central Maine Healthcare's IT environment between March 19 and June 1, 2025. The attackers may have accessed patients' files and sensitive information, including:
- Patient names
- Dates of birth
- Social Security numbers
- Treatment information and medical records
- Diagnostic information
- Protected health information (PHI)
The nature of the attack and the number of affected individuals is not disclosed.
The organization has announced staff layoffs following the incident, suggesting significant financial strain from the breach and its aftermath. The hospital system is also facing multiple class action lawsuits. Six separate suits were filed as early as June 6, 2025, alleging negligence and seeking damages for the data exposure.
Central Maine Healthcare began notifying affected patients on July 31, 2025, approximately two months after discovering the breach. The organization is offering a complimentary one-year membership to identity protection services including triple bureau credit monitoring, access to credit reports and scores, fraud assistance and up to $1 million in identity theft insurance.
