By Hannah Kaufman
Morning Sentinel
LEWISTON, Maine — Cyber incidents that shut down systems at two Lewiston hospitals in recent weeks caused ambulances to be diverted, leaving rescue chiefs and patients in limbo.
Rick Sieberg, Gardiner’s fire chief, said he was not aware of the cyber incidents until June 10, when a Morning Sentinel reporter asked him about them.
His department regularly transports patients to Lewiston, either to St. Mary’s Regional Medical Center or Central Maine Medical Center. St. Mary’s, which is part of St. Mary’s Health System and owned by Covenant Health, reported a cyber incident in late May, and Central Maine Healthcare, which runs CMMC along with hospitals in Rumford and Bridgton, identified unusual software activity June 1 and shut down its technology systems.
When both hospitals diverted Sieberg’s ambulances over the last couple of weeks, he thought it was a coincidence.
“I didn’t realize that they had had a cyber attack happen,” Sieberg said.
He said his crews transport 75% of patients from Litchfield to the two hospitals, especially Central Maine Medical Center — the only facility in the region where patients can receive certain heart-related procedures.
The situation has impacted patients in need of care; it brought appointments, lab work and medication refills to a standstill, resulting in harrowing stories from patients waiting on emergency surgeries, vital prescriptions and critical medical imaging.
One hospital was using handwritten notes for medical reports, Sieberg said.
“Recently, we actually ended up not transporting to Central Maine Medical Center because they had no computers. They were literally doing handwritten reports,” Sieberg said. “So the crews ended up going over to St. Mary’s because they could at least take patients in. And my battalion chiefs have said that, fairly frequently, we’ll get phone calls from St. Mary’s saying that they’re on diversion.”
Hospitals that are on diversion can’t take new ambulance arrivals and, instead, redirect crews to the next available facility.
Central Maine Healthcare representatives did not respond to a request for comment Friday.
St. Mary’s emergency department was on intermittent diversion from May 26-30 for neurological and stroke cases, Karen Sullivan, communications officer at Covenant Health, said in an email Friday.
“It is important to note that these cases are uncommon in the St. Mary’s ED under normal circumstances,” Sullivan wrote. “We were able to continue care in the ED, the hospital and our provider practices during this time without disruption thanks to long-established downtime procedures. We are no longer on diversion and are fully operational.”
Sieberg said he did not know that the intermittent diversion calls from St. Mary’s had been connected.
“They’ve been within the last couple weeks, so they’re probably all connected,” he said. “I had no idea. That’s too bad.”
Diversions and longer transport times are routine for United Ambulance Service, a medical transportation service in Lewiston that regularly does inter-facility transports, said Executive Director Paul Gosselin.
“We may know that there’s a diversion that happened, but we treat it like it’s a normal call,” he said. “Depending on the diversion, it could be for whatever reason — the IT issue that came about, or it could be the hospital is full, or an MRI machine went down, or something like that. I mean, those things routinely happen. I’m not saying they happen all the time, but they happen and we just treat it like it’s a normal transport.”
Local rescue departments do not have that freedom. Many fire departments lack the time, personnel and resources to send ambulance crews farther distances, while maintaining a quick and consistent response to emergency calls back home, officials said.
Chris Moretto, chief of Winthrop Ambulance Service, said his crews have experienced slightly longer wait times transporting to the Lewiston hospitals.
“There was a crew that went down there the other day,” Moretto said. “And, now that I say that, I do remember that the emergency room was pretty busy and everything was being done by hand versus on the computer.
“It slowed the process down a little bit, but it wasn’t terrible, other than that it was really busy,” he said. “And I don’t know if it was busy because it was abnormally busy with patients, or if it was busy because the system is slowed down.”
Sieberg said his department transported a patient to Central Maine Medical Center on June 12 without being diverted.
Covenant Health, which also owns St. Joseph Hospital in Bangor, has cited the problem as a “cyber incident.” MaineHealth, another hospital system, similarly characterized the incidents in a statement.
” MaineHealth continues to be vigilant in its efforts to guard against cyber incidents and protect patient information, and out of an abundance of caution, severed connections between its systems and those of Central Maine Healthcare and St. Mary’s when it became aware of the incidents,” the release said.
The incidents come amid a steady rise in cyberattacks on hospitals across the country. Hackers are targeting patient data, which contains valuable financial information; medical records, addresses and other identifiers.
From 2018-22, there was a 93% increase in large health care breaches reported to the U.S. Department of Health and Human Services, with a 278% increase in large breaches involving ransomware, according to Peter Cassell, a public affairs specialist at the department’s Administration for Strategic Preparedness and Response.
Now that Sieberg is aware of the cyber incidents, he’ll be sure to check in with the affected hospitals ahead of time, he said.
“Now that I know that that’s an issue, I might just clue the guys in so that they can give the hospital an extra heads up to find out if we can come in,” Sieberg said. “Because, obviously, we try to help each other out professionally. If they can’t handle something, or they’re super swamped or whatever, we try to give them an extra heads up so that we can know whether to go there or not.”
© 2025 the Morning Sentinel (Waterville, Maine).
Visit www.onlinesentinel.com.
Distributed by Tribune Content Agency, LLC.