HackingHealthcareHealthcareStolen CredentialsDelayed DiscoveryIdentity (basic)Government IDMediumActive

BELL AMBULANCE, INC.

bd_2b5f418e67b72617 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Jan 15, 2026

To disclose

48 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

64%

Full breach record for BELL AMBULANCE, INC. →2 incidents on file

Bell Ambulance, Inc. notified consumers of unauthorized access to its network discovered on February 13, 2025. The incident impacted names combined with government identifiers. Bell engaged forensic specialists, reset passwords, and offered credit monitoring. Notification was sent in April 2026, with an ongoing review.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday48 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 48 weeks / 336 days

Feb 13, 2025

Discovered

Jan 15, 2026

Filed

vs. sector median

+36 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 318 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_f1cf4748b82af0982025-03-02 · +318dVerified by operator

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_2389a666ac0bf0a62026-01-15Verified by operator
Vermont State AGbd_356c69671b1b44da2026-03-09 · +53dVerified
Maine State AGbd_56ad893bf5400f922026-03-09 · +53dVerified
Nebraska State AGbd_f8ede484a1daaad22026-03-09 · +53dVerified

Show 2 more filings ↓up to 365d gap

HHS OCRbd_ef857344ef42d81e2025-04-14 · +276dVerified
Nebraska State AGbd_ef404c21ce276c502025-01-15 · +365dVerified by operator

Name: BELL AMBULANCE, INC.
norm: bell ambulance

Name: BELL AMBULANCE, INC.
norm: bell ambulance
Industry: Healthcarellm

Discovered: Feb 13, 2025
Materiality determined: —
Notification sent: Apr 18, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party forensic specialists
Reset passwords
Secured all accounts
Conducted a full investigation into the incident
Offering access to credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(336 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Nebraska State AGJan 15 · first

HHS OCR+89d

Massachusetts State AG+365d

Vermont State AG+365d · this page

Vermont State AG+418d

Maine State AG+418d

Nebraska State AG+418d

Pattern: first filing Jan 15 (NE), last Mar 9 (NE) — a 418-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-01-15-bell-ambulance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2026
Raw hash: 8c32cef9ecd583ea0b9228692632331ed271779ee57cb872f0c494e1933b1e84

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityBELL AMBULANCE, INC.

Victim entityBELL AMBULANCE, INC.

Incidentdiscovered Feb 13, 2025

Stated responseEngaged third-party forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov