Major US healthcare breach exposes data on 145,000 patients - Central Maine Healthcare reveals all

• CMH breach exposed PII of 145,381 patients and employees in March 2025
• Stolen data includes names, SSNs, health insurance, and treatment information
• No actors claimed responsibility; victims offered credit monitoring and support services

The data breach incident that happened at Central Maine Healthcare (CMH) in spring 2025 affected more than 145,000 people, who may have lost personally identifiable information (PII) to unidentified hackers.

The organization confirmed the news in a data breach notification letter which was sent out to all affected individuals, noting the cyberattack happened in late March and was spotted in June 2025.

After ousting the intruders, CMH kicked off an investigation, to determine what happened and what the damage was, which concluded on November 6, 2025, when CMH realized sensitive data on exactly 145,381 individuals had been taken.