Central Maine Healthcare Data Breach Exposes 145,000 Individuals’ Sensitive Information
Central Maine Healthcare (CMH) disclosed a data breach that compromised the personal and medical information of over 145,000 individuals. The intrusion, detected on June 1, 2024, remained undetected for more than two months, with hackers active on CMH’s systems from March 19 to June 1.
CMH, which serves approximately 400,000 patients across facilities like Central Maine Medical Center, Bridgton Hospital, and Rumford Hospital, completed its investigation on November 6, 2025, confirming the final count of affected individuals at 145,381. The breach impacted both patients and current or former employees.
Exposed data included full names, dates of birth, treatment details, provider names, health insurance information, and Social Security numbers (SSNs). The incident heightens risks of phishing, impersonation, and financial fraud for those affected.
CMH began notifying impacted individuals shortly after discovery and has since set up a dedicated support line for inquiries and fraud reports. The organization is also providing free credit monitoring services to mitigate financial risks. No threat actor claims have been publicly linked to the attack as of the latest reports.
Bridgton Hospital cybersecurity rating report: https://www.rankiteo.com/company/bridgton-hospital
"id": "BRI1768343410",
"linkid": "bridgton-hospital",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '145,381',
'industry': 'Healthcare',
'location': 'Maine, USA',
'name': 'Central Maine Healthcare (CMH)',
'size': 'Serves 400,000+ people',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Review healthcare statements, report discrepancies, '
'and enroll in free credit monitoring services.',
'data_breach': {'number_of_records_exposed': '145,381',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Dates of birth',
'Treatment information',
'Dates of service',
'Provider names',
'Health insurance information',
'Social Security Number (SSN)']},
'date_detected': '2024-06-01',
'date_publicly_disclosed': '2024-12-29',
'date_resolved': '2025-11-06',
'description': 'A data breach at Central Maine Healthcare (CMH) exposed '
'sensitive information of more than 145,000 individuals. '
"Hackers persisted on the organization's systems for over two "
'months before the intrusion was discovered.',
'impact': {'brand_reputation_impact': 'Increased risk of phishing, '
'impersonation, and fraud',
'data_compromised': 'Sensitive personal and health information',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed',
'recommendations': 'Affected individuals should review healthcare statements '
'for discrepancies and enroll in free credit monitoring '
'services.',
'references': [{'source': 'BleepingComputer'}],
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals; dedicated patient '
'support line set up'},
'title': 'Central Maine Healthcare Data Breach',
'type': 'Data Breach'}