- CMH breach exposed personal information of 145,381 patients and employees in March 2025
- The stolen data includes names, SSNs, health insurance and treatment information.
- No actor has claimed responsibility; victims offered credit monitoring and support services
The data breach incident at Central Maine Healthcare (CMH) in spring 2025 affected more than 145,000 people, who may have lost personally identifiable information (PII) to unidentified hackers.
The organization confirmed the news in a data breach notification letter that was sent to everyone affected, noting that the cyberattack occurred in late March and was spotted in June 2025.
After chasing away the intruders, the CMH launched an investigation to determine what had happened and what the damage was, which ended on November 6, 2025, when the CMH realized that sensitive data on exactly 145,381 people had been seized.
The data has not yet surfaced
The stolen data included people’s names, dates of birth, treatment information, dates of service, provider names, health insurance information, and Social Security numbers (SSN). Employees and patients would be affected by this violation.
“For patients whose information may have been involved in the incident, Central Maine Healthcare recommends that they review the statements they receive from their health care providers and health insurance plans,” the organization said. “If they notice services that were not received, they should contact the provider or health plan immediately.”
As is common practice in these situations, CMH offers free credit and identity theft monitoring services, as well as a dedicated helpline where victims can get answers, report abuse, and discuss potential concerns.
As of press time, no malicious actor has taken responsibility for this attack, and the stolen data has yet to surface on the dark web. Criminals are more likely to use it in phishing attacks or sell it to another actor.
Central Maine Healthcare is a nonprofit, integrated health care delivery system that serves approximately 400,000 residents in central, western and central Maine.
It operates three hospitals: Central Maine Medical Center in Lewiston, Bridgton Hospital and Rumford Hospital, as well as an extensive primary and specialty care network with more than 600 physicians and advanced practice professionals in more than 40 locations. Its services include trauma care, cardiovascular disease and cancer treatment, and the LifeFlight helicopter service.
Via BeepComputer
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
