About Covenant Health, Inc.
Covenant Health, Inc., a healthcare organization based in Andover, MA, experienced a significant data breach affecting a large number of individuals. The breach involved unauthorized access to their external systems, leading to the compromise of sensitive patient information. This incident has impacted 478,188 individuals, including 284,529 Maine residents. The breach was discovered on May 26, 2025, following unauthorized access on May 18, 2025.
What Happened
On December 10, 2025, through its ongoing extensive data analysis, Covenant Health and its third-party forensic specialists determined your information may have been involved in a data security incident that occurred earlier this year. Covenant Health was alerted to unusual activity in our Information Technology (“IT”) environment on May 26, 2025, and immediately worked to secure and restore our systems. We engaged industry-leading third-party information technology and forensic specialists to conduct a thorough investigation into the source and extent of the incident, including the amount and type of data that may have been affected. Through that investigation, we learned that an unauthorized party gained access to our IT environment on May 18, 2025, and was able to access some patient information.
The breach involved unauthorized access to Covenant Health’s IT environment, affecting patients whose sensitive information was compromised. The breach occurred on May 18, 2025, and was discovered on May 26, 2025.
Next Steps
Individuals affected by the Covenant Health data breach are advised to remain vigilant for incidents of fraud and identity theft by monitoring their account statements and credit reports for any unauthorized activity. It is recommended to review health insurer statements for any discrepancies and to contact the insurer immediately if any unrecognized services are found. Covenant Health has also established a dedicated call center to address any questions or concerns from affected individuals. Additionally, affected individuals should consider placing fraud alerts or security freezes on their credit reports to prevent further unauthorized access.
Identity Theft Protection Services
Covenant Health is offering a complimentary one-year membership to Experian IdentityWorks for identity protection to those impacted by the breach. This service includes features such as credit monitoring, identity restoration, and fraud consultation. Enrollees will also receive an Experian credit report at signup and daily credit report monitoring for online members. Additionally, the service offers Experian IdentityWorks ExtendCARE for continued identity restoration support after membership expires and includes $1 million in identity theft insurance to cover certain costs and unauthorized transactions. Affected individuals are encouraged to activate their membership to take advantage of these protective measures.