HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Central Maine healthcare
bd_be68a6b426d77d7a · schema v1 · pii pii-v1
Full breach record for Central Maine healthcare →Central Maine Healthcare (Lewiston, ME) reported an external system breach in which an unauthorized party accessed its IT network between March 19, 2025 and June 1, 2025. The breach was detected on June 1, 2025 and confirmed on July 29, 2025 to have involved files containing names and Social Security numbers. Eight Maine residents were affected. CMH notified law enforcement and implemented enhanced monitoring; affected individuals were offered one-year TransUnion identity protection services.
Maine clockDiscovered Jul 29, 2025 → Filed with AG Jul 31, 20252d ✓ ME AG ≤30d2 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a43cff1d-621d-4f88-b8c4-624503299cd4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 31, 2025
- Raw hash
- ff6083e3faa89e4a02e1c5ac9b4b1d841c54c1d684c9899282e5741e84298983
Reporting entity
- Name
- Central Maine healthcarenorm: central maine healthcare
- Industry
- Healthcare
Victim entity
- Name
- Central Maine healthcarenorm: central maine healthcare
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jul 29, 2025
- Materiality determined
- —
- Notification sent
- Aug 8, 2025
- Affected individuals
- 8
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 2 days(2 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 2d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 29, 2025→ Filed with AG: Jul 31, 20252d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.