Confirmed breach. Intrusion Mar 19, 2025–Jun 1, 2025, discovered Jun 1, 2025 — the first regulatory filing landed 225 days later (flagged late). 283,800 individuals reported across the linked filings.
Central Maine Healthcare reported an external system breach (hacking) that impacted 138,800 Maine residents. The incident occurred between March 19, 2025, and June 1, 2025, and was discovered on July 29, 2025. The company offered one year of credit and dark web monitoring services through Transunion to those affected.
Central Maine Healthcare, a healthcare organization based in Lewiston, ME, experienced an internal system breach on March 19, 2025, discovered on June 1, 2025. Approximately 145,000 Maine residents were affected. A substitute notice was issued on December 29, 2025. Credit monitoring services were offered to affected individuals. The specific data types and attack vector were not disclosed in the available notice.
Affected (this filing): 145,000
ME AG >90d · 228d
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.