HackingOtherStolen CredentialsDelayed DiscoveryIdentity (basic)Government IDMediumContained

BELL AMBULANCE, INC.

bd_356c69671b1b44da · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Mar 9, 2026

To disclose

13 months

Affected

Not disclosed

Linked

8 filings

Confidence

64%

Full breach record for BELL AMBULANCE, INC. →2 incidents on file

Bell Ambulance, Inc. notified consumers of unauthorized network access discovered on February 13, 2025. The incident impacted names combined with government identifiers (e.g., SSN). Bell engaged forensic specialists, reset passwords, and offered credit monitoring. Notification was sent in April 2025 with follow-ups in January 2026.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 13 months / 389 days

Feb 13, 2025

Discovered

Mar 9, 2026

Filed

vs. sector median

+48 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 371 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_f1cf4748b82af0982025-03-02 · +371dVerified by operator

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_56ad893bf5400f922026-03-09Verified
Nebraska State AGbd_f8ede484a1daaad22026-03-09Verified
Massachusetts State AGbd_2389a666ac0bf0a62026-01-15 · +53dVerified by operator
Vermont State AGbd_2b5f418e67b726172026-01-15 · +53dCandidate

Show 2 more filings ↓up to 418d gap

HHS OCRbd_ef857344ef42d81e2025-04-14 · +329dVerified
Nebraska State AGbd_ef404c21ce276c502025-01-15 · +418dVerified by operator

Name: BELL AMBULANCE, INC.
norm: bell ambulance

Name: BELL AMBULANCE, INC.
norm: bell ambulance
Industry: Otherllm

Discovered: Feb 13, 2025
Materiality determined: —
Notification sent: Apr 18, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notice with Vermont Attorney General
Initial access: valid_credentials

During the incident: Engaged third-party forensic specialists
Reset passwords
Secured all accounts
Conducted a full investigation into the incident
Offering access to credit monitoring and identity protection services
Changes made: Secured all accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(389 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Nebraska State AGJan 15 · first

HHS OCR+89d

Massachusetts State AG+365d

Vermont State AG+365d

Maine State AG+418d

Nebraska State AG+418d

Vermont State AG+418d · this page

Pattern: first filing Jan 15 (NE), last Mar 9 (VT) — a 418-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-03-09-bell-ambulance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2026
Raw hash: 0da122499937a420f37b12f2f19713c0b8894768d7db028140bf0083acf15757

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityBELL AMBULANCE, INC.

Victim entityBELL AMBULANCE, INC.

Incidentdiscovered Feb 13, 2025

Stated responseEngaged third-party forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov