Central Maine Healthcare Reaches $1.3 Million Data Breach Settlement: How to Claim Your Cash Payout

Central Maine Healthcare has agreed to a $1.3 million class action settlement to resolve claims stemming from a major data breach that exposed the private health records and personal details of more than 218,000 individuals.

If you received medical care at Central Maine Healthcare or accessed its systems, an unauthorized third party may have accessed your sensitive personal and medical records. Under the terms of the proposed settlement, affected consumers can receive up to $5,000 in cash reimbursement for financial losses, cash payments for undocumented claims, and a free year of medical records monitoring. You must submit your official claim form by September 28, 2026, to receive settlement benefits.

At ClassActionU.org, we believe everyday people deserve protection when healthcare institutions fail to safeguard private data. Here is everything you need to know about what happened, who qualifies for compensation, and how to assert your rights before the deadline.

What Happened in the Central Maine Healthcare Data Breach?

The settlement resolves class action litigation resulting from a cyberattack that compromised Central Maine Healthcare’s internal computer network between March 19, 2025, and June 1, 2025.

Following an internal investigation completed late in 2025, the healthcare system determined that an unauthorized intruder gained access to its IT infrastructure and acquired files containing sensitive patient records. Central Maine Healthcare subsequently issued notices to more than 218,000 affected patients and individuals, alerting them that their private data had been exposed.

Plaintiffs in the class action lawsuit allege that Central Maine Healthcare failed to implement reasonable cybersecurity safeguards, leaving patient networks vulnerable to unauthorized access. While Central Maine Healthcare has agreed to establish the $1.3 million settlement fund, the healthcare system denies all allegations of liability and wrongdoing.

What Personal Information Was Exposed in the Breach?

Cybercriminals accessed files containing highly sensitive personal, financial, and medical information. Depending on the individual, the compromised data may include:

• Full legal names and dates of birth

• Social Security numbers

• Confidential medical records and health information

• Patient identification numbers and administrative data

When medical systems suffer data compromises, patients face heightened risks of identity theft, medical fraud, and financial exploitation. Cybercriminals can use exposed health data to fraudulently bill insurance companies, open credit accounts, or target victims with sophisticated phishing scams.

How Data Privacy Laws Protect Patients in Medical Breaches

Healthcare systems maintain vast repositories of sensitive data and are governed by strict federal and state regulations designed to ensure patient confidentiality.

Under the Health Insurance Portability and Accountability Act (HIPAA), covered healthcare entities must implement physical, administrative, and technical safeguards to prevent unauthorized access to protected health information (PHI). Additionally, state-level consumer protection laws hold corporations accountable when negligent security practices expose consumer records to malicious actors.

When healthcare providers fail to maintain adequate digital defenses, affected patients have the right to seek financial recovery under civil law. Class action lawsuits allow everyday people to unite, hold companies accountable, and recover compensation for the risks and burdens imposed by data exposure.

Who Is Eligible to Receive Settlement Benefits?

You may be eligible to participate in the settlement and submit a claim if you meet the following criteria:

• You received a notice from Central Maine Healthcare informing you that your personal or health information was compromised in the data breach that occurred between March and June 2025; or

• Your personal information, Social Security number, or medical records were stored on Central Maine Healthcare’s IT systems during the breach window.

Approximately 218,000 individuals fall within the class definition. If you are unsure whether your records were involved, you can verify your status through the official settlement portal or by reviewing previous data breach notifications sent by Central Maine Healthcare.

How Much Cash Can You Receive from the Settlement?

The $1.3 million settlement fund provides multiple tiers of compensation based on the extent of your impact:

• Reimbursement for Financial Losses (Up to $5,000): If you incurred documented out-of-pocket expenses, fraudulent charges, or professional fees directly linked to the breach, you can claim up to $5,000 in cash reimbursement.

• Alternative Cash Payouts: Eligible class members without documented financial losses can submit a claim for an estimated cash payment of up to $50.

• Free Medical Records Monitoring: All eligible class members can claim one full year of free medical records and credit monitoring services to protect against identity theft.

Key Deadlines and What You Need to Do Next

To participate in the settlement or protect your individual legal options, you must act before court-established deadlines:

The Androscoggin County Superior Court will hold a Final Approval Hearing at the end of October 2026 to determine whether the proposed settlement is fair, reasonable, and adequate. Cash distributions will be processed following final court approval and the resolution of any appeals.