280,000 Maine Residents Impacted by Covenant Health Data Breach
Overview of the Data Breach
ANDOVER, Mass. (WMTW) – A significant data breach has affected a large number of Maine residents, as revealed by a health care network based in Massachusetts. Covenant Health, which operates several health systems, including St. Mary’s Health System in Lewiston and St. Joseph Healthcare in Bangor, has disclosed that hundreds of thousands more individuals have been impacted by a security incident that occurred nearly eight months ago.
Initial Discovery and Response
Covenant Health was first alerted to unusual IT activity on May 26, 2025. Shortly after, both St. Mary’s Health and St. Joseph Healthcare reported IT issues that affected phones and documentation systems, with some services becoming intermittently unavailable. The organization worked swiftly to secure its systems and restore operations. To understand the full scope of the incident, Covenant Health brought in third-party IT and forensic specialists.
Details of the Breach
The investigation uncovered that a hacker had accessed Covenant Health’s IT system on May 18, 2025. This unauthorized access allowed the individual to access certain patient information from the health care network and its affiliated entities. The personal information potentially involved varied by patient, but included details such as names, addresses, dates of birth, medical record numbers, Social Security numbers, health insurance information, and treatment information like diagnoses, dates of treatment, and types of treatment.
Notification and Expansion of Affected Individuals
On July 11, 2025, Covenant Health notified those who may have been affected by the breach. According to a notice filed with the Maine Attorney General’s Office, approximately 7,864 people were initially affected, including 4,659 Maine residents. However, on December 31, 2025, the organization announced that additional patient information might have been involved. This led to the distribution of notification letters and an updated report filed with the Maine Attorney General’s Office, indicating that 478,188 people were affected, including 284,529 Maine residents.
Recommendations for Affected Individuals
Covenant Health advised individuals whose information may have been compromised to review statements from their health care providers and insurance plans. If any services are noticed that were not received, they should contact their provider or insurance company immediately. Additionally, the organization is offering complimentary credit monitoring and identity theft protection services to those whose Social Security numbers may have been involved.
Contact Information
Patients who believe their personal information was involved and have questions about the breach can call 1-855-361-0344 between 9 a.m. and 9 p.m. Monday through Friday, excluding major U.S. holidays.
Legal Action
In June 2025, a class action lawsuit was filed against Covenant Health and Bangor’s St. Joseph Hospital over the data breach. The lawsuit accused the organizations of failing to properly protect patients’ private information.
Enhanced Security Measures
In its December 31 statement, Covenant Health mentioned that it has enhanced the security of its IT system to prevent similar breaches from occurring in the future.
Additional Facilities
Covenant Health operates facilities across multiple states, including Maine, Massachusetts, New Hampshire, Rhode Island, and Pennsylvania. In addition to St. Mary’s Health System and St. Joseph Healthcare, the organization owns St. André Health Care in Biddeford and the Bangor Nursing and Rehabilitation Center.
- Soal dan Pembahasan Bentuk Molekul untuk Tingkat SMA - January 20, 2026
- Jadwal Pencairan Tunjangan Sertifikasi Guru 2026 dan Tahapan yang Perlu Diketahui - January 20, 2026
- Para peneliti menghubungkan bahan kimia industri dengan penyakit Parkinson - January 20, 2026
Leave a Reply