Medical Express Ambulance Inc. (MedEx) recently experienced a data breach that may have allowed unauthorized access to patient health information and employee personal information. At this time, MedEx has not received any reports of related misuse of health information since the date of the Incident.

On March 18, 2024, MedEx experienced a network disruption that impacted the functionality and access of certain systems. Upon discovery of this incident, MedEx immediately disconnected all access to the network and promptly engaged a specialized third-party cybersecurity firm and IT personnel to assist with securing the environment, as well as, to conduct a comprehensive forensic investigation to determine the nature and scope of the incident. The forensic investigation determined that personal information may have been acquired by the threat actor.

Based on these findings, MedEx decided to proceed with an analysis of the compromised data for any potential sensitive personal information (PII) or protected health information (PHI). MedEx engaged a third-party vendor to review the data that was compromised. The data mining process took some time given the complexities of the types and volume of the data analyzed, requiring multiple phases of automated and manual review. On March 3, 2025, MedEx engaged a third-party notice vendor to assist with the mailings, call center, and provide identity theft protection services for those whose sensitive information was impacted. Thereafter, MedEx worked to verify the patient information and addresses for mailing. On March 19, 2025, MedEx finalized the list of individuals to notify.

The information affected varied for each impacted individual. Based on the investigation, the following information related to potentially impacted individuals may have been subject to unauthorized access: Name; date of birth; demographic information, Social Security number, driver's license number; state identification number; medical information; financial information; health insurance information; username and password; and for some, passport information. Please note that the information above varies for each potentially impacted individual.