This $1,368,025 settlement covers people Central Maine Healthcare and Central Maine Medical Center notified about a data incident between March and June of 2025. If you got that notice, you can claim an estimated $50 without documentation — or up to $5,000 if you can document losses — plus a year of medical records monitoring.
Current Status
Claims are open. Claim Forms must be submitted online or postmarked by September 28, 2026, and the notice does not specify a cutoff time or a time zone. The final approval hearing is scheduled for October 28, 2026 at 9:00 a.m. before Justice Thomas McKeon in Auburn, Maine, so the court has not yet decided whether to approve the settlement. No payment date had been announced as of August 29, 2026. If you were sent a notice with a Unique ID and PIN, the action to take now is to file a Claim Form and decide whether you also want the free year of medical records monitoring.What Changed Recently?
Notice went out to the settlement class and the claim period is running toward its September 28, 2026 close. The lawsuit is captioned In re Central Maine Data Security Litigation, Docket No. ANDSC-CIV-2025-00083, and it is being overseen by Justice Thomas McKeon of the Business and Consumer Court for Androscoggin County, Maine. The defendants are Central Maine Healthcare Corporation, which does business as Central Maine Healthcare, and Central Maine Medical Center.According to the court-authorized notice, the plaintiffs allege that an unauthorized party may have accessed Private Information the defendants collected and maintained — names combined with private health information or other non-public personally identifiable information — during a period running from approximately March to June of 2025. The defendants deny the legal claims and deny any wrongdoing or liability, and the court has not made any determination that either company did anything wrong or violated any law. The case has not gone to trial; the parties agreed to settle to avoid the risk, cost, and time of continued litigation.
Who Qualifies?
The Settlement Class is every individual residing in the United States whose Private Information may have been impacted in the Data Incident and to whom the defendants sent an individual notification that they were affected. The individual notice is the gate here: the class is not defined by having been a Central Maine patient, but by having been notified.Excluded from the class are all persons who are directors and officers of the defendants, governmental entities, and the judge assigned to the lawsuit along with that judge's immediate family and court staff. If you are unsure whether you are a class member, the official settlement website's contact page is the place to ask.
How Much Can You Get?
The settlement fund is $1,368,025. Attorneys' fees, litigation costs, service awards, and administration costs come out of that fund before class member benefits are calculated. You choose one of two cash options on the Claim Form, and the medical records monitoring stacks on top of whichever one you pick.Cash Payment A — Documented Losses reimburses up to $5,000 per Settlement Class Member for losses traceable to the Data Incident, supported by reasonable documentation. Expenses already reimbursed from another source are not eligible.
Cash Payment B — Alternate Cash is a pro rata payment the notice estimates at $50, with no documentation required. This is the option for class members who cannot point to a specific out-of-pocket loss.
Medical Records Monitoring is one year of coverage, available in addition to Cash Payment A or Cash Payment B — but you have to request it on the Claim Form, so a claimant who only fills in the cash section leaves it behind.
Both cash figures are estimates. The administrator pays for the medical records monitoring out of the net settlement fund first and calculates cash payments from what is left, then adjusts every cash payment pro rata on an equal percentage basis: up if valid claims do not use the fund, down if valid claims exceed it. There is also injunctive relief — the notice says the defendants are implementing additional security measures following the incident.
Class counsel will ask the court to award attorneys' fees of up to one-third of the settlement fund plus reimbursement of reasonable costs, and service awards of up to $2,500 each for the class representatives. The court may award less than those amounts.
What Proof or Notice ID Is Required?
Proof is required. The online claim portal opens with a login that asks for a Unique ID and a PIN, both printed on the notice you were sent — an administrator-issued credential that gates the claim even if you select the no-documentation alternate cash option. Under OCA's standard, that makes this a Proof Required: Yes settlement regardless of the "without documentation" wording attached to Cash Payment B.On top of that credential, Cash Payment A requires reasonable documentation of losses traceable to the Data Incident. If you claim documented losses but do not submit supporting documentation, or the administrator finds the Claim Form invalid and you do not cure it, the notice says your Claim Form is processed as if you had elected Cash Payment B instead.
If you cannot find your Unique ID and PIN, a printable Claim Form is available for download from the official settlement website, and the site's contact page is the route to reach the administrator about missing login details.
What Is the Deadline?
- File a Claim Form: submitted online or postmarked by September 28, 2026
- Exclude yourself (opt out): postmarked by September 13, 2026
- Object to the settlement: filed with the court by September 13, 2026
- Final approval hearing: October 28, 2026 at 9:00 a.m. (Androscoggin County Superior Court, Auburn, Maine)
The notice does not state a cutoff time or a time zone for any of these dates, so this page does not publish one. A mailed Claim Form is judged by its postmark, and the notice warns that mail is postmarked when it reaches a processing facility rather than when it is dropped in a box — so mailing well ahead of the date matters if you file on paper.
How Do You Take Action?
File through the official settlement website, CMH Data Security Settlement.com. Log in with the Unique ID and PIN from your notice, choose Cash Payment A or Cash Payment B, check the box for the year of Medical Records Monitoring if you want it, and attach documentation if you are claiming out-of-pocket losses. A downloadable Claim Form on the same site can be completed, signed, dated, and mailed instead.If your mailing or email address changes after you file, the notice puts the burden on you to tell the administrator, which you can do in writing through the address on the Claim Form. Excluding yourself requires a signed written request mailed to the administrator, and it is the only way to keep the right to sue over the released claims — but an opt-out gets no cash payment and no monitoring.
What Happens Next?
The next milestone is the October 28, 2026 final approval hearing, where the court will consider whether the settlement is fair, reasonable, and adequate and will rule on the request for attorneys' fees, costs, and service awards. The notice warns that the hearing's date and time can change without further notice to the class, and that the court may hold it by video or telephone, so the official settlement website is the place to confirm it.A hearing being held is not the same as approval being granted. Benefits are provided only after the court approves the settlement and that approval becomes final, which can take additional time if anyone appeals. No payment date had been announced as of August 29, 2026.
Sources and Verification
- In re Central Maine Data Security Litigation — Official Settlement Website
- Official Settlement FAQs — benefits, deadlines, opt-out and objection requirements
- Official Claim Portal — Unique ID and PIN login
- Court-Authorized Long Form Notice (PDF)
Questions
Who qualifies for the Central Maine Healthcare data breach settlement?
You qualify if you live in the United States, your Private Information may have been impacted in the March to June 2025 Data Incident, and Central Maine Healthcare or Central Maine Medical Center sent you an individual notification that you were affected. Directors and officers of the defendants, governmental entities, and the assigned judge, the judge's immediate family and court staff are excluded.
How much is the Central Maine Healthcare settlement paying?
The settlement fund is $1,368,025. You may claim either reimbursement of up to $5,000 for documented losses traceable to the incident, or an alternate cash payment estimated at $50 with no documentation. Either amount can move up or down pro rata depending on how many valid claims come in, and the notice describes the $50 figure as an estimate rather than a guaranteed amount.
Can I get the medical records monitoring and a cash payment?
Yes. One year of Medical Records Monitoring is in addition to whichever cash payment you select, not instead of it, but you have to ask for it on the same Claim Form. The administrator pays for the monitoring out of the net settlement fund first, then calculates the cash payments from what remains.
Do I need proof to file a Central Maine Healthcare claim?
Yes. Filing online requires the Unique ID and PIN printed on the notice you were sent, so an administrator-issued code gates the claim even for the no-documentation cash option. Claims for documented losses additionally need reasonable documentation of losses traceable to the incident. A paper Claim Form can be downloaded from the official settlement website.
What is the deadline for the Central Maine Healthcare settlement?
Claim Forms must be submitted online by September 28, 2026, or mailed and postmarked by September 28, 2026. The separate deadline to opt out or to object is September 13, 2026. The notice does not specify a cutoff time or a time zone for these dates.
Is CMHDataSecuritySettlement.com legit?
Yes. CMHDataSecuritySettlement.com is the official, court-authorized settlement website for In re Central Maine Data Security Litigation, Docket No. ANDSC-CIV-2025-00083, pending in the Business and Consumer Court for Androscoggin County, Maine, and administered by Epiq. The defendants deny wrongdoing and the court has not decided who is right. File only through the official settlement website.
What happens if my documented-loss claim is rejected?
The notice says that if you do not submit reasonable documentation supporting a loss, or the administrator finds your Claim Form invalid and you do not cure it, your claim is processed as if you had elected the alternate cash payment instead. In practical terms a documented-loss claim that falls short is not simply discarded.
When will Central Maine Healthcare settlement payments be sent?
Benefits are provided after the court approves the settlement and the approval becomes final. The final approval hearing is scheduled for October 28, 2026 at 9:00 a.m. before Justice Thomas McKeon in Auburn, Maine. No payment date had been announced as of August 29, 2026.
Watch Out for Scams
A court-appointed administrator never charges a fee to release a class action payment and will not ask for banking passwords or a "processing payment" by text or phone. Use only the official settlement website linked on this page. Hospital-system breaches keep producing settlements on similar terms — the Tift Regional Health System settlement and the Susan B. Allen Memorial Hospital settlement are two open examples. For a wider view, see our roundup of open data breach settlements and our explainer on how a data breach class action works.Official Settlement Notice
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
