Substitute Notice for Vendor Data Security Incident

Date: 06/27/2025

Bangor, ME (June 27, 2025) — Northern Light Health was notified by Compumedics, a vendor used for diagnostic and research technologies for sleep disorders, that they were involved in a data security incident affecting the health information of certain patients who received services at several of our hospitals. Compumedics serves numerous researchers, hospitals, and universities worldwide, including Northern Light Eastern Maine Medical Center, Northern Light AR Gould, and Northern Light Sebasticook Valley Hospital.

After Compumedics initially identified the incident on March 22, 2025, they performed a full investigation, which determined that an unauthorized party accessed their systems and viewed or copied some files between February 15, 2025 and March 23, 2025. Compromised files for Northern Light Health patients may have included names, birth dates, demographic information, allergies, medical record number, dates of treatment, the location that performed the sleep study, and information or test results related to a sleep study. There is no indication that Northern Light Health patient social security numbers, health insurance, or financial information was compromised.

No Northern Light Health information technology systems were affected by this incident.
Safeguarding patient information is our top priority, and we take any data security incident very seriously. We continue to work closely with Compumedics and have been assured they immediately took action to contain the event and are implementing additional measures to enhance the security of their network to prevent similar incidents from happening in the future. In an abundance of caution, patients involved in the incident are advised to carefully review healthcare statements from their providers and insurers for services they did not receive and notify the statement issuer immediately of any suspicious charges.

Compumedics notified affected Northern Light Health hospital patients by mail on June 27, 2025. This message constitutes substitute service for those individuals they attempted to notify but were unable to reach. Potentially impacted patients are limited to those who had, or were scheduled for, a sleep study at Northern Light Eastern Maine Medical Center, Northern Light AR Gould, or Northern Light Sebasticook Valley Hospital between July 15, 2019 and March 20, 2025. Patients with questions or concerns are advised to reach out to the Compumedics helpline Patients with questions or concerns are advised to reach out to the Compumedics helpline at 1-877-841-3302, Monday through Friday, 8 am - 8 pm CT.