The company runs multiple hospitals in Maine and is now facing six class action suits.
On June 1st, Central Maine Healthcare first began experiencing disruptions to its computer and phone systems. Soon after, the company detected unusual activity and shut down all impacted systems. Following the incident, the company’s document systems and website were down. Several hospitals, including Central Maine Medical Center, Bridgton Hospital, and Rumford Hospital, were continuing to receive and treat patients. Some visits were rescheduled due to the IT system outage. In addition, their Cancer Care Center–which relies on operational computer systems–was not fully operational for several weeks.
Central Maine Healthcare provided frequent updates on the incident, encouraging those in need of prescriptions to bring a recent bottle with prescription information on it, as well as reminding individuals to contact 911 if experiencing a medical emergency.
Approximately one month later, on July 2nd, Central Maine Healthcare announced that its systems had been fully restored.
Although their systems are now back online, the Central Healthcare is facing additional challenges; as of now, six class action lawsuits have been filed against the company. According to local news, the lawsuits claim patient data was exposed and allege negligence and breach of implied contract. A motion to consolidate the cases is now also being considered.
Similar breaches have become commonplace around the nation. Also in Maine, a case has been filed against Covenant Health, the parent company of two hospitals–St. Mary’s in Lewston and St. Joseph’s in Bangor–was filed in June for a different breach.
These cases show how frequently healthcare organizations are targeted and that large organizations, even if they purport strong cybersecurity measures, can be vulnerable to breaches.
The breach at Central Healthcare also shows the power of strong communication; the company did an excellent job of providing continual updates on the status of their healthcare facilities, including labs and pharmacies, which allowed patients to coordinate with other care providers as needed.
Most likely, the class action suits will be consolidated into one suit, unless the cases are arguing significantly different points. This will help expedite the process and ensure all impacted individuals are treated fairly.
It’s often more cost-effective for hospitals to agree to a settlement without admitting wrongdoing. Despite the trend, it’s always possible for a suit to go to court.