Central Maine Medical Center

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

Central Maine Medical Center Data Breach

Central Maine Medical Center (CMMC) in Lewiston experienced a data breach that compromised the protected health information of 11,938 patients. The breach was reported on June 3, 2022, as required under state and federal law. The hospital’s IT system was accessed by an unauthorized user, although the specific type of data that may have been accessed was not confirmed in the breach notice. CMMC began sending out data breach notification letters to the impacted individuals to inform them of the incident[3].

The breach was part of a larger digital attack on Shields Health Care Group Inc., which may have compromised the personal information of as many as 2 million people. The data potentially accessed included names, Social Security numbers, dates of birth, and medical or treatment details. Shields Health Care Group, which provides services at various locations including CMMC, reported the breach to federal law enforcement and the U.S. Department of Health and Human Services Office for Civil Rights. There was no evidence at the time to indicate that the compromised information had been used to commit identity theft or fraud[5].

For those affected by the breach, it is important to monitor their financial accounts and credit reports for any unusual activity and consider taking additional steps to protect their identity, such as placing a fraud alert or credit freeze on their credit files.

Citations:

  1. https://www.jdsupra.com/legalnews/central-maine-medical-center-files-6832655/
  2. http://www.maine.gov/governor/mills/news/governor-mills-visits-central-maine-medical-center-thank-medical-professionals-caring-lewiston
  3. https://www.beckershospitalreview.com/cybersecurity/maine-medical-center-data-breach-affects-11-938-patients.html
  4. https://www.bangordailynews.com/2024/01/16/central-maine/central-maine-health/central-maine-healthcare-reorganization/
  5. https://www.pressherald.com/2022/06/08/data-breach-at-health-care-organization-may-affect-2-million-people-including-in-maine/
  6. https://wgme.com/news/local/central-maine-healthcare-eliminate-45-positions-management-administration-layoffs-hospital
  7. https://caselaw.findlaw.com/me-supreme-judicial-court/1768989.html
  8. https://www.nytimes.com/2023/10/25/us/central-maine-medical-center.html
  9. https://law.justia.com/cases/maine/supreme-court/2017/2017-me-22.html
  10. https://www.centralmaine.com/2024/02/17/a-rapidly-changing-landscape-for-first-responders-leaves-many-firefighters-emts-unprotected/
  11. https://www.cmhc.org/about-us/cmh-privacy-policy/
  12. https://www.necn.com/lewiston-maine-mass-shootings/last-of-13-lewiston-mass-shooting-victims-at-central-maine-medial-center-released-from-hospital/3120930/
  13. https://www.sunjournal.com/2024/01/16/central-maine-healthcare-to-cut-45-positions-amid-management-reorganization/
  14. https://www.newscentermaine.com/article/news/local/lewiston-auburn/patient-injured-in-lewiston-mass-shooting-released-from-hospital-cmmc-maine/97-cc54acce-e5ff-4a3a-bdb1-06ee666265bd
  15. https://law.justia.com/cases/maine/supreme-court/2012/2012-me-109.html
Breach Submission Date Jul 21, 2022
Converted Entity Name Central Maine Medical Center
Converted Entity Type Healthcare Provider
State ME
Individuals Affected 11,938
Breach Type Hacking/IT Incident

Breach Information Location Network Server

Business Associate Present Yes