145K exposed after hacker hit of Maine’s largest health systems

Attackers roamed Central Maine Healthcare for over two months, rummaging through sensitive patient data, which in some cases included treatment information and health insurance data.

Central Maine Healthcare contacted tens of thousands of the health system's patients over a 2025 data breach. Information the organization submitted to the Maine Attorney General’s Office revealed that the hacker attack exposed 145,000 patients.

According to Central Maine Healthcare’s data breach notice, the organization first noticed unusual activity on its systems in early June, 2025. The incident prompted an investigation, which revealed that attackers roamed the health system since March 19,2025.

During that period, attackers managed to access a treasure trove of sensitive patient information, such as names and Social Security Numbers (SSNs). Additionally, attackers may have been able to pair names and SSNs with one or more of the following:

• Home addresses
• Treatment information
• Dates of service
• Provider names
• Health insurance information

Malicious actors may try to capitalize on the leaked data by exploiting it for various fraud schemes. The most obvious one is identity theft, when attackers use stolen names, SSNs, and other personal details to set up fraudulent accounts or submit fraudulent tax claims.

However, losing medical information makes the data breach a lot more riskier for those impacted. For one, medical and biometric data are non-recoverable, which means that, unlike passwords or credit cards, users cannot change their medical histories once they've been compromised.

Attackers can use treatment data to blackmail individuals who want to keep certain medical conditions private.

Another key issue is medical identity theft and insurance fraud. In such cases, attackers can impersonate individuals to obtain prescription drugs. And if the stolen information includes patient histories, it could lead to cases of blackmail.

To help exposed individuals alleviate security risks, Central Maine Healthcare said it will offer victims complimentary identity theft and credit monitoring services.

Central Maine Healthcare operated several hospitals in central and western Maine, as well as primary care practices and speciality services. The health system serves around 400,000 people, or nearly 30% of the total population of Maine.

Unlock more exclusive Cybernews content on YouTube.