Central Maine Healthcare in Lewiston, Maine, shut down its IT infrastructure on June 1, 2025, following the detection of unusual activity within its systems, prompting an ongoing investigation into a suspected cyberattack. The organization, which oversees Central Maine Medical Center, Bridgton Hospital, and Rumford Hospital, disabled all IT applications, network servers, and phone systems as a precaution. Despite the shutdown, hospitals remain open, though some elective procedures are being rescheduled. Officials announced the disruption via social media on June 2, noting that IT teams and cybersecurity experts are working to determine the scope of the incident.
The suspected attack follows a confirmed cyberattack on Covenant Health facilities on May 26, 2025. The Catholic nonprofit operates St. Mary’s Regional Medical Center in Lewiston, St. Joseph Hospital in Bangor, Maine, and St. Joseph Hospital in Nashua, New Hampshire. Covenant Health shut down systemwide access across hospitals, clinics, and provider practices after discovering network irregularities caused by an outside threat actor. The disruption has impacted access to electronic records, diagnostics, prescription services, and communications, with no timeline for full restoration. Cybersecurity experts from outside firms have been engaged to assist in recovery efforts.
This marks the third healthcare system in Maine to be affected by cyber incidents in under a week and the second such event in Lewiston alone. The geographic and chronological proximity of these attacks has raised concerns among cybersecurity professionals and public officials about the vulnerability of Maine’s healthcare infrastructure. While no connection between the incidents has been confirmed, the wave of attacks has disrupted services across central and northern Maine, highlighting the urgent need for improved digital defenses in regional healthcare systems.
