Cottage Hospital experienced an external system breach, identified as hacking, that occurred between October 14, 2025, and October 21, 2025. The hospital discovered the breach on January 27, 2026, and began notifying affected consumers on February 6, 2026. Regulatory bodies, including the Maine Attorney General, were notified.
The breach involved personal identifiers in combination with names, Social Security Numbers, financial account information, and driver's license numbers. An estimated 2,156 individuals were affected in total, including 83 Maine residents and 62 Massachusetts residents. The full extent of individuals affected in other states has not been publicly confirmed.
Details can emerge later as investigations continue, and notices to consumers may be delayed.