What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
BayMark confirms that an unauthorized party accessed files on its systems, but its public notice does not confirm that ransomware caused the breach. Independent reporting linked the incident to the RansomHub ransomware group; that attribution and the group’s claimed data theft remain unverified by BayMark. The exposed files may have included sensitive patient and treatment information.
Was BayMark hacked by ransomware?
BayMark’s patient notice says an unauthorized party accessed some files on its systems between September 24 and October 14, 2024. The Maine Attorney General classifies the incident as an “External system breach (hacking).” BayMark says it brought in third-party forensic experts and notified law enforcement.
Comparitech reported that RansomHub claimed responsibility and said it had stolen 1.5 TB of data. Check Point Research also listed BayMark among RansomHub compromises. Those reports link the incident to ransomware, but BayMark’s notices do not confirm the group’s attribution or its claim about the volume of data stolen.
When did the incident happen, and when were patients notified?
- September 24–October 14, 2024: The period when BayMark says the unauthorized access occurred; the Maine filing gives the same breach period.
- October 11, 2024: BayMark says the incident disrupted some IT operations.
- January 8, 2025: BayMark’s HCRC notice says patient letters began on this date.
- March 20, 2025: The Maine Attorney General filing lists this as the discovery date.
- May 2, 2025: The Maine filing lists this as the consumer-notification date.
The published dates do not align into a single notification timeline: BayMark’s HCRC notice says letters began before the Maine filing’s listed discovery and consumer-notification dates. The notices do not explain the difference.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What information may have been exposed?
BayMark said the affected files could have contained a patient’s name along with one or more of these data types:
- Social Security number or driver’s-license number
- Date of birth
- Services received and dates of service
- Insurance information
- Treating provider
- Treatment or diagnostic information
Not every patient’s information necessarily included every category. Check your individualized notice to see what BayMark says may have applied to you.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How many people were affected?
| Reported figure | What it represents | Source and qualification |
|---|---|---|
| 16,548 people overall | Total affected count listed in the Maine filing | Maine Attorney General, 2025 filing |
| 481 Maine residents | Affected people in Maine | Maine Attorney General, 2025 filing |
| 3,170 individuals | Affected count reported in a Comparitech update | Comparitech, January 16, 2025; the report does not establish how this figure relates to the Maine filing’s later overall count |
The available notices and reporting do not explain the difference between the two overall figures, so they should not be treated as interchangeable.
What should BayMark patients do?
- Read your BayMark notice. Use the individualized letter to determine which data types may have been involved and whether you qualify for the offered monitoring.
- Enroll in the offered identity monitoring if eligible. BayMark’s mailed notice offered one year of Equifax Complete Premier to patients whose Social Security or driver’s-license numbers may have been involved. The notice describes credit monitoring, WebScan alerts, fraud alerts, identity restoration, and identity-theft insurance features. Follow the enrollment instructions in your letter.
- Review financial activity and credit reports. Check account statements for unfamiliar transactions and review your credit reports for activity you do not recognize. BayMark’s notice recommends vigilance and checking statements and free credit reports.
- Consider a fraud alert or security freeze. You can contact the credit bureaus to ask about placing a fraud alert or freeze. A freeze restricts access to your credit file for new-credit applications; a fraud alert asks creditors to take extra steps to verify your identity.
- Contact BayMark’s breach call center with notice questions. BayMark listed 855-295-0995 as its dedicated call-center number.
What BayMark says it changed
BayMark says it added safeguards and technical monitoring after the incident. It also says it began reviewing potentially affected files with help from forensic experts. Its notice does not provide details about the specific technical safeguards.
Recommended Free Tools
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
