145,000 Americans Warned After ‘Unauthorized Entity’ Breaches Healthcare Firm, Accessing Trove of Sensitive Information

A healthcare firm has disclosed a major cybersecurity incident that may have exposed the personally identifying and personal health data of tens of thousands of Americans.

The latest bulletin from the Office of the Maine Attorney General shows that Central Maine Healthcare was hit by an internal system breach on March 19th, 2025, impacting 145,000 American patients.

The firm says it detected that an unauthorized entity gained access to its systems and stole files that may include patient names, Social Security numbers, addresses, treatment records, dates of service, provider names and health insurance records.

“On November 6th, 2025, we completed our investigation and analysis of an incident that may have resulted in unauthorized access to some of our patient information. We first identified the incident on June 1, 2025, when we detected unusual activity in our information technology (‘IT’) network. We immediately took steps to protect and secure our systems. We promptly launched an investigation and notified law enforcement.

Through our investigation, we determined that an unauthorized party gained access to our IT network between March 19th, 2025 and June 1st, 2025, and was able to access and/or acquire certain files from Central Maine Healthcare IT systems.”

Central Maine Healthcare operates multiple hospitals, clinics and physician practices to provide a wide range of medical services, including emergency and trauma, primary care and maternity and pediatric care.

The firm says it abruptly notified impacted individuals, while offering free credit monitoring services for 12 months. The firm adds that it has implemented enhanced monitoring and ing software to prevent a similar incident from happening in the future.

Generated Image: Midjourney