A cyberattack has impacted three Covenant Health hospitals. This forced them to shut down all systems. The shutdown was to contain the security incident. St. Mary’s Health System reported system issues. These affected some phones and documentation systems. Care is continuing there, but with longer waits. St. Joseph Hospital also had system issues. Their outpatient lab services were adjusted on May 27th. Labs became available only at the main hospital. Services required a physical order in hand.
Covenant Health is a non-profit Catholic health system. It sponsors hospitals and other health services.
These are located throughout New England. The cyberattack began on Monday, May 26, 2025. It led to a shutdown of many systems. This included hospitals, clinics, and provider practices. It is unclear if data was stolen. It’s also unknown if ransomware was used. Top cybersecurity experts were hired by Covenant Health. They are working to contain and investigate. Services are continuing with minimal disruption reported.
Patients have been advised to keep all appointments.
A spokesperson confirmed the cyberattack’s impact. Two hospitals in Maine were affected. These are St. Joseph Hospital and St. Mary’s Health System. One New Hampshire hospital was also hit. This is also named St. Joseph Hospital. Access to all data systems was immediately discontinued. This was done out of an abundance of caution. The attack had minimal impact on post-acute care facilities. These facilities operate on a different clinical platform. All affected hospitals posted messages on social media. They notified patients of technology outages earlier this week.
No cybercriminal group has yet claimed responsibility. The investigation is still in its early stages. Staff are working to resolve issues quickly. They aim to restore systems and services fully. Some ambulances were diverted to other hospitals. Patients needing certain services were also taken elsewhere. The U.S. healthcare sector has seen multiple attacks in 2025. Ransomware attacks on these providers surged in 2024. This new incident adds to growing industry concerns. Hospitals often face system lockdowns during such events. They are then forced to switch to manual processes.
Reference:
