Massachusetts-based Covenant Health revealed that a cyberattack exposed the personal information of over 478,000 patients.
The healthcare organization first reported the breach affected fewer than 8,000 people, but recent analysis shows the true number is much larger.
The Qilin ransomware group claimed responsibility for the attack, stating it stole more than 1.3 million files totaling 850 GB of data.
Sensitive Information Stolen in the Covenant Health Breach
Hackers accessed Covenant Health’s IT systems on May 18, 2025. The company didn’t discover the intrusion until eight days later on May 26. Patient records exposed in this breach may include:
- Social Security numbers
- Dates of birth
- Health insurance details
- Treatment information including diagnoses
- Names and home addresses
- Medical record numbers
TROYPOINT Tip: Protect your identity and personal info from a data breach by using Aura which is TROYPOINT’s recommended identity theft protection.
Aura Identity Theft Protection Review
Covenant Health operates hospitals and healthcare facilities across New England and parts of Pennsylvania. St. Mary’s Health System in Lewiston, Maine and St. Joseph Healthcare in Bangor are among its affiliated facilities.
Covenant Health’s Response
After discovering unusual IT activity, Covenant Health says it immediately worked to secure and restore its systems. The organization hired third-party forensic specialists to investigate how the breach occurred and what data was accessed.
Hide Your Digital Fingerprint
On July 11, 2025, the company began mailing notification letters to affected patients. Those whose Social Security numbers were compromised are receiving free credit monitoring and identity theft protection services.
Covenant Health states it has strengthened security measures within its IT environment to prevent similar incidents. The organization also set up a dedicated call center for patients with questions about the breach.
A class action lawsuit was filed against Covenant Health and St. Joseph Hospital in June 2025. The lawsuit accuses the healthcare network of failing to properly protect patient records.
How Exposed Patients Can Protect Themselves
If you received healthcare services from any Covenant Health facility, take these steps now:
Review statements from your health insurance provider carefully. Look for any services you didn’t receive and report them immediately.
Covenant Health is offering free credit monitoring and identity theft protection to those whose Social Security numbers were compromised. Call 1-855-361-0344 Monday through Friday between 9 a.m. and 9 p.m. Eastern Time for assistance.
Consider placing a fraud alert on your credit file through the three major bureaus: Equifax, Experian, and TransUnion.
Final Thoughts
This Covenant Health data breach serves as a stark reminder about the risks we all face online. Healthcare organizations store sensitive personal information, making them prime targets for ransomware groups like Qilin.
Keep watching your accounts and credit reports in the coming months if you may have been affected by this incident.
For more details on this story, refer to the official notice from Covenant Health, the Data Breach Notification, and the video from News Center Maine.
Exclusive Surfshark Discount
Your online activity is currently monitored by your ISP, app/addon/IPTV developers, government agencies, and the websites you visit.
- Become 100% anonymous while streaming and downloading.
- Use on Unlimited Devices & share 1 account with the entire family.
- Save 85% with the 24-Month Plan + Get 3 FREE Months.
We want to know your thoughts. What do you think about this story? Let us know in the comment section below!
Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.
This page includes affiliate links where TROYPOINT may receive a commission at no extra cost to you. Many times, visitors will receive a discount due to the special arrangements made for our fans. Learn more on my Affiliate Disclaimer page.
