Aroostook Mental Health Center 2026 Data Breach
The Aroostook Mental Health Center 2026 data breach concerns unauthorized access to the organization's computer network and the taking of certain files.
Exposed Data Types
1 sensitive2- Protected health information (categories not publicly disclosed)
- Personal information (categories not publicly disclosed)
About This Breach
According to AMHC's official notice, the network disruption was identified on 12 March 2026. On 21 March, the organization determined that its network had been accessed between 11 and 12 March and that certain files containing personal information had been taken without authorization.
The U.S. Department of Health and Human Services Office for Civil Rights (HHS/OCR) lists the event as a hacking or IT incident involving a network server and reports 501 affected people. This is a person count, not a count of files or individual data fields.
What is known about the data scope?
AMHC's public notice states that the files contained personal information but does not list detailed categories such as Social Security numbers, diagnoses, treatment, insurance, or financial information. The HHS/OCR entry confirms that the event falls within the federal healthcare breach report, but it does not establish that any particular health field applied to all 501 people. If an individual notice is available, that document is the primary source for the recipient's specific data scope.
Organization response and safe next steps
AMHC said it secured the network, worked with specialists to restore systems and investigate the impact, strengthened technical security controls, and reported the event to federal law enforcement. Because detailed data categories have not been publicly disclosed, notice recipients should follow the guidance in their letters and verify unfamiliar account, credit, or healthcare activity through the relevant institution's official channel. A catalogue record or match alone does not prove that someone received services from AMHC or that a particular health detail was exposed.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
