Cyberattack Disrupts Operations at St. Joseph Hospitals in Maine and New Hampshire

St. Joseph Hospital in Bangor, Maine, and its counterpart in Nashua, New Hampshire, both operated by Catholic-based Covenant Health, were hit by a cyberattack on Monday, May 26, 2025. The incident, described by officials as a “cyber incident initiated by an outside group,” forced the organization to shut down all data systems across hospitals, clinics, and provider practices. Connectivity issues prompted Covenant to take immediate protective measures, affecting access to electronic records, appointment scheduling, and internal communications. Covenant Health spokesperson Karen Sullivan confirmed that outside cybersecurity experts have been engaged to investigate the breach and assist in restoring full system functionality.

The attack caused operational disruptions at both St. Joseph locations, with some ambulance services diverted, diagnostic scans redirected to other facilities, and patients reporting difficulties refilling prescriptions. In Nashua, staff worked under modified procedures to continue patient care amid system outages, while Bangor saw similar workflow adjustments. Though no timeline for full restoration has been provided, Covenant Health has assured the public that patient care remains a priority. Cybersecurity analysts warn that medical institutions are increasingly targeted due to the high value of patient data on illicit markets, highlighting the urgent need for improved digital defenses across the health care sector.