Almeida Law Group is investigating a data breach at Maine Health Behavioral Health. The breach occurred on January 1st, 2020 and was discovered on May 30th, 2026. If you were affected, contact Almeida Law Group.
About Maine Health Behavioral Health
Maine Health Behavioral Health (also known as Maine Behavioral Healthcare) is a 501(c)(3) nonprofit behavioral health organization that provides outpatient counseling, substance use treatment, crisis intervention, inpatient psychiatric care, and community support services. It serves more than 20,000 children, adolescents, and adults across more than 30 locations in southern, western, and mid-coast Maine, and is part of the MaineHealth integrated health system. The organization has a clinical location in Sanford, ME.
What Happened?
Maine Health Behavioral Health was listed in a Maine Attorney General data breach filing reported on June 11th, 2026. The filing describes an external system breach (hacking). The total number of persons affected was listed as over 500, though the exact count was described as uncertain. No identity theft protection services were offered to affected individuals. The specific types of information involved were not identified in the filing.
There are several notable and unusual characteristics of this filing that warrant attention. It was submitted by an individual who identified as a client and described their relationship to the incident as “myself and other people in my group home.” The submitter used placeholder contact details, including a phone number of all zeros and a generic email address. This is atypical for Maine AG breach notifications, which are ordinarily filed by the affected organization, its legal counsel, or a compliance officer. The filing may represent a consumer complaint rather than an organizational self-report. Additionally, the listed breach date of January 1st, 2020 and discovery date of May 30th, 2026 reflect a gap of more than six years, which is extraordinary. The January 1st, 2020 date may be an approximation or placeholder. No independent media, cybersecurity, or regulatory reporting corroborating this specific incident was found.
Key Facts at a Glance
- Company or Organization: Maine Health Behavioral Health
- Industry: Healthcare – Behavioral/Mental Health Services
- Location: Sanford, ME 04073 (clinical location); administrative office in Westbrook, ME; part of the MaineHealth system
- Incident type: External system breach (hacking)
- Date of breach: January 1st, 2020
- Date breach discovered: May 30th, 2026
- Date of consumer notification: June 11th, 2026
- Total persons affected: Over 500 (exact number uncertain per filing)
- Identity theft protection offered: No
- Source: Maine AG Data Breach Filing; MaineHealth Behavioral Health – Official Page
What Should You Do?
If you believe you may be affected by this incident, you should act promptly to protect yourself. Although no identity theft protection was offered, you can place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—at no cost. Review your credit reports for unfamiliar accounts or activity at AnnualCreditReport.com, and monitor your financial accounts for unauthorized transactions. Because this incident involves a behavioral health organization, you should also review any Explanation of Benefits statements from your insurer and request copies of your medical records to check for inaccuracies that could indicate misuse of your health information. If you suspect your information has been misused, you can report it and get a personal recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
