HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
Fallon Ambulance Services
bd_80bc1b119564c2f6 · schema v1 · pii pii-v1
Full breach record for Fallon Ambulance Services →Fallon Ambulance Services, a subsidiary of Transformative Healthcare, notified the NH Attorney General of unauthorized access to archived patient data. Suspicious activity was detected on April 21, 2023, affecting activity occurring between Feb 17 and April 22, 2023. Approximately 63,523 NH residents were impacted. Personal information was obtained by an unauthorized party. Fallon engaged third-party specialists, consulted federal law enforcement, and offered two years of identity protection services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_d00356114bbdcd1eCalifornia State AGfiled 2023-12-29(1d gap)Candidate
- bd_2847eb9a18943e5aVermont State AGfiled 2023-12-27(1d gap)Verified
- bd_cc199dfe8cb04b13Montana State AGfiled 2023-12-27(1d gap)Candidate
- bd_69bdd56750b2ff63HHS OCRfiled 2023-12-31(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fallon-ambulance-services-transformative-healthcare-20231228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2023
- Raw hash
- e48803f1545a9e9932b47588d5e9a9422f32524a5cf3c5420b4c769614c2dcae
Reporting entity
- Name
- Fallon Ambulance Servicesnorm: fallon ambulance
Victim entity
- Name
- Fallon Ambulance Servicesnorm: fallon ambulance
Incident
- Discovered
- Apr 21, 2023
- Materiality determined
- Dec 27, 2023
- Notification sent
- Dec 27, 2023
- Affected individuals
- 63,523
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice Office of the Attorney General
Compliance
- Time to disclose
- 36 weeks(251 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.