Covenant Health: St. Joseph Healthcare (Bangor, Maine) and St. Mary’s Health System (Lewiston, Maine) Cyberattack Investigation

On May 26, 2025, Covenant Health became aware of system issues at two of its healthcare organizations : St. Joseph Healthcare and St. Mary’s Health System. The connectivity issues were attributed to an outside organization accessing its systems without authorization, i.e., a cyberattack. From May 26, 2025 (and at least until the date of this post – June 5, 2025), the organizations’ phone and documentation systems were down. It’s too soon to say if patients’ or employees’ personally identifiable information (“PII”) or protected health information (“PHI”) was stolen during the attack, but it’s not unusual to learn weeks or months down the road that “PII” and “PHI” were compromised. Regrettably, by that time, ransomware groups often have been offering the stolen data on the dark web. If you have been a patient of or employed by St. Joseph Healthcare or St. Mary’s Health System and have concerns that your “PII” or “PHI” may have been compromised due to the cyberattack and you would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.