- CMH breach exposed PII of 145,381 patients and employees in March 2025
- Stolen data includes names, SSNs, health insurance and treatment information
- No actors claimed responsibility; victims offered credit monitoring and support services
The data breach incident that occurred at Central Maine Healthcare (CMH) in the spring of 2025 affected more than 145,000 people who may have lost personally identifiable information (PII) to unidentified hackers.
The organization confirmed the news in a data breach notification letter sent out to all affected individuals, noting that the cyber attack took place in late March and was seen in June 2025.
After expelling the intruders, CMH launched an investigation to determine what happened and what the damage was, which was concluded on November 6, 2025, when CMH realized that sensitive data on exactly 145,381 people had been taken.
Data has yet to appear
The stolen data included people’s names, dates of birth, treatment information, dates of service, provider names, health insurance information and social security numbers (SSN). Both employees and patients were reportedly affected by this breach.
“For patients whose information may have been involved in the incident, Central Maine Healthcare recommends that they review the statements they receive from their health care providers and health insurance plans,” the organization said. “If they see any services that were not received, they should contact the provider or health plan immediately.”
As is standard practice in these situations, CMH offers free credit and identity theft monitoring services as well as a dedicated support line where victims can get answers, report abuse and discuss potential concerns.
As of press time, no threat actors have claimed responsibility for this attack, and the data that was stolen has yet to appear anywhere on the dark web. Criminals are likely to either use it for phishing attacks or sell it to another actor.
Central Maine Healthcare is an integrated not-for-profit health care system serving approximately 400,000 residents across central, western and mid-coastal Maine.
It operates three hospitals: Central Maine Medical Center in Lewiston, Bridgton Hospital and Rumford Hospital, as well as a large primary and specialty care network of more than 600 physicians and advanced practice professionals in over 40 locations. Its services include trauma care, cardiovascular and cancer care and LifeFlight helicopter service.
Via Bleeping Computer
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
