Central Maine Healthcare Investigating Potential Cyberattack
Central Maine Healthcare has shut down its information technology applications, hardware, network servers, and phone systems, and is investigating a potential cyberattack. Unusual activity was identified within its information systems on June 1, 2025, and systems were immediately secured and shut down. Information technology technicians are working on identifying the nature and scope of the incident and determining whether there has been unauthorized access to its IT systems and patient information.
Central Maine Healthcare posted a notice about the potential security incident on its Facebook page on June 2, 2025. Document systems and Internet access have been affected, and its website is currently inaccessible; however, Central Maine Medical Center, Bridgton Hospital, and Rumford Hospital are continuing to receive and treat patients, although some elective procedures and office visits may be rescheduled due to the IT system outage. The health system said it will release further information as the investigation progresses, but at this stage, the cause of the unusual activity has yet to be made public.
Central Maine Medical Center is located in Lewiston, as is Covenant Health’s St. Mary’s Health System, which is dealing with its own cybersecurity incident. Covenant Health said it started experiencing connectivity issues on May 26, 2025, almost a week before the suspected cyberattack on Central Maine Healthcare, and has confirmed that the disruption was the result of a cyberattack.
The Covenant Health cyberattack is affecting St. Joseph Hospital in Nashua, NH, St. Joseph Hospital in Bangor, ME, and St Mary’s Hospital in Lewiston, ME. Covenant Healthcare is still working on restoring full system access and is currently unable to provide a timeline on when systems will be restored. It is unclear if the cyberattacks on the two healthcare systems are related.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
While both health care systems are facing disruption due to the lack of access to IT systems, they are working on established downtime procedures and are recording patient information manually. Both health systems are encouraging patients to keep their appointments unless contacted to advise otherwise.
