ENKR

Covenant Health possible patient and resident data breach

Add to my breach check

Made public · 478,188 people

What leaked6

Hard to replace

  • Home or delivery address
  • Other profile data

Permanent

  • Health information
  • Social Security number
  • Date of birth
  • Full name
  • Health informationtreatment information such as diagnoses, dates and type of treatment
  • Other profile datamedical record numbers; health insurance information

To-dos5 · about 1 h 30 min in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name (opens in a new tab)
  2. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name (opens in a new tab)
  3. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name (opens in a new tab)
  4. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  5. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)

What happened next10 events

  1. Undetected 2 events8 days · show events
  2. Response 5 eventsNotice in 46 days · show events
  3. Remedy 1 eventOngoing · show events
  4. PenaltyNone on record
  5. Disputes 2 eventsOngoing · show events
  1. Agreed most terms of a $2 million class settlement at mediation; the court later gave preliminary approval; claims due by December 30, 2026Until December 30, 2026
  2. Letters mailed to residents of its care homes
  3. Breach report published by the Texas attorney general: 478,188 people in total
  4. Letters to more patients; the updated Maine filing gives 478,188 people
  5. First notice to the Maine attorney general: 7,864 people
5 more
  1. Offered credit monitoring and identity theft protection to people whose Social Security numbers may have been involved
  2. Began mailing letters to patients
  3. A class action was filed against Covenant Health and St. Joseph Hospital in Bangor
  4. Alerted to unusual activity in its IT environment
  5. Intrusion began
Company
Covenant Health
When it happened
–
Company detected it
Made public
Notice
Possible leak
Affected
478,188 people · total in Covenant Health's filing with the Texas attorney general, published January 5, 2026; the press later gave 502,606

Sources