280K More Maine Residents Impacted by Covenant Health Breach
Understanding the Data Breach at Covenant Health
A significant data breach has impacted hundreds of thousands of Maine residents, according to a health care network based in Massachusetts. The incident, which occurred nearly eight months ago, has led to increased awareness and concern among affected individuals. Covenant Health, which owns St. Mary’s Health System in Lewiston and St. Joseph Healthcare in Bangor, first became aware of unusual IT activity on May 26, 2025.
Initial IT Issues and Response
In late May, both St. Mary’s Health and St. Joseph Healthcare experienced IT issues that disrupted phone services and documentation systems. Some services were temporarily unavailable during this period. In response, Covenant Health took immediate steps to secure and restore its systems. The organization also brought in third-party IT and forensic specialists to investigate the source and extent of the incident.
Discovery of the Breach
Through the investigation, Covenant Health discovered that a hacker had gained access to its IT system on May 18, 2025. This unauthorized access allowed the individual to access certain patient information belonging to the health care network and its affiliated entities. The personal information potentially involved varied by patient but included details such as names, addresses, dates of birth, medical record numbers, Social Security numbers, health insurance information, and treatment information like diagnoses, dates of treatment, and types of treatment.
Notification and Expansion of Affected Individuals
On July 11, 2025, Covenant Health notified individuals who may have been impacted by the data breach. According to a notice filed with the Maine Attorney General’s Office, 7,864 people were affected, including 4,659 Maine residents. However, on December 31, 2025, Covenant Health announced that additional patient information may have been involved in the breach. The updated notice indicated that 478,188 people were affected, including 284,529 Maine residents.
Steps for Affected Individuals
Covenant Health advised individuals whose information may have been compromised to review statements from their health care providers and health insurance plans. If any services were seen that were not received, individuals should contact their provider or insurance company immediately. Additionally, the organization is offering complimentary credit monitoring and identity theft protection services to those whose Social Security numbers may have been involved.
For any questions regarding the data breach, patients can call 1-855-361-0344 between 9 a.m. and 9 p.m. Monday through Friday, excluding major U.S. holidays.
Legal Action and Enhanced Security Measures
In June 2025, a class action lawsuit was filed against Covenant Health and Bangor’s St. Joseph Hospital over the data breach. The lawsuit accused the organizations of failing to properly protect patients’ private information. In its December 31 statement, Covenant Health emphasized that it has enhanced the security of its IT system to prevent similar incidents from occurring in the future.
About Covenant Health
Covenant Health operates facilities in Maine, Massachusetts, New Hampshire, Rhode Island, and Pennsylvania. In addition to St. Mary’s Health System and St. Joseph Healthcare, the organization owns St. André Health Care in Biddeford and the Bangor Nursing and Rehabilitation Center.
Additional Information and Resources
For more updates and news, readers are encouraged to explore the latest stories and weather reports from WMTW. Stay informed with the latest Portland, Maine, news and stay in the know with the team at WMTW.
- Link Resmi GTK 2026 Terbaru dan Cara Mengatasi Error Login - January 17, 2026
- Ikatan Kimia: Gaya yang Menyatukan Atom - January 17, 2026
- Menteri Kesehatan: H3N2 Tidak Seberbahaya Seperti COVID-19 - January 17, 2026
Leave a Reply