Central Maine Healthcare Reaches $1.3M Settlement in Data Breach Lawsuit

Central Maine Healthcare has agreed to pay $1.3 million to settle a class-action lawsuit related to a 2025 data security breach that compromised the personal information of nearly 220,000 individuals.

In December 2025, Central Maine Healthcare disclosed a cybersecurity incident in which threat actors gained unauthorized access to its internal network between March and June 2025 and stole sensitive information. An investigation determined that the breach affected nearly 220,000 individuals, potentially exposing personal and medical information such as names, dates of birth, treatment details, dates of service, health insurance information, and, in some cases, Social Security numbers.

Following the cyberattack, a class action lawsuit was filed against CMH in the Business and Consumer Court for Androscoggin County, Maine. The lawsuit claims that the healthcare provider failed to implement reasonable data security measures and adequately safeguard the personal information entrusted to it.

While CMH denied any wrongdoing or negligence, both sides agreed to settle the case to avoid the costs and risks of continued litigation and allow Class members to receive benefits under the settlement.

Under the proposed settlement, CMH will establish a $1,368,025 settlement fund to compensate eligible class members and cover credit monitoring, documented losses, attorneys’ fees, administration costs, and service awards.

Eligible class members may claim up to $5,000 for documented losses related to the Data Incident. Expenses reimbursed by another source are not eligible. In addition to reimbursement for eligible losses, class members may also claim one year of free Medical Records Monitoring. The amount of any cash payment may be increased or reduced on a pro rata basis depending on the funds remaining after monitoring costs are deducted.

The proposed settlement has been granted preliminary approval by the court but has not yet become final. A final approval hearing is scheduled for October 28, when the court will decide whether to approve the settlement.