Central Maine healthcare
ent_e39862a0de019b8e
Disclosures
6
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
222,810
nationwide · HHS OCR ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Central Maine healthcare
- Normalized
- central maine healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Maine State AGas victim2026-01-15
Central Maine Healthcare reported an internal system breach affecting 145,000 individuals. Unauthorized access occurred between March 19 and June 1, 2025, involving patient PII, SSNs, and health information. The incident was discovered on June 1, 2025, and notifications were sent on December 29, 2025. Credit monitoring was offered.
- Maine State AGas victim2026-01-12
Central Maine Healthcare reported a data breach affecting 145,381 individuals, including 138,800 Maine residents. Unauthorized access occurred between March 19 and June 1, 2025, and was discovered on June 1, 2025. The incident involved the potential acquisition of names, Social Security numbers, and driver's license numbers. Notifications were sent starting August 8, 2025, offering credit monitoring services.
- MAINEHHS OCRas victim2025-07-31
Central Maine Healthcare reported to HHS on 2025-07-31 a malware incident affecting 222,810 individuals. Breached information located on Network Server. ePHI included names, DOB, SSNs, diagnoses, lab results, and medications. CE implemented additional safeguards; OCR provided technical assistance.
- Maine State AGas victim2025-07-31
Central Maine Healthcare reported an external system breach (hacking) occurring between March 19, 2025 and June 1, 2025. The incident was detected on June 1, 2025, and confirmed to involve names and Social Security Numbers on July 29, 2025. Eight Maine residents were affected. The company notified law enforcement, implemented enhanced monitoring, and offered one year of credit monitoring via TransUnion.
- New Hampshire State AGas victim2019-09-13
Central Maine Healthcare notified NH AG of an employee email account compromise affecting 1 NH resident. Personal info (name, SSN, DOB, address) potentially accessed. CMHC shut down accounts, hired forensic firm, terminated credentials, and offered 1-year Experian IdentityWorks.
- Massachusetts State AGas victim2019-09-13
Central Maine Healthcare reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-09-13. 3 Massachusetts residents were affected. The report records the breach type as electronic.