HackingHealthcareTransportation & LogisticsHealthcareCustomer Data InvolvedDelayed DiscoveryPHIGovernment IDIdentity (basic)Health (basic)MediumContained

Medical Express Ambulance Inc.

bd_b8194707753b0e0b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 18, 2024

Filed

Apr 14, 2025

To disclose

13 months

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for Medical Express Ambulance Inc. →2 incidents on file

Medical Express Ambulance Inc. (MedEx) notified consumers of a data breach discovered on March 18, 2024, involving unauthorized access to sensitive personal information. The incident impacted Name, Date of Birth, Social Security Number, Driver's License/State ID, and Health Insurance Information. MedEx disconnected network access, engaged forensic investigators, reset credentials, and enhanced security systems. Affected individuals are offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday13 months discovery → filing

Incident timeline

discovery → filing · 13 months / 392 days

Mar 18, 2024

Discovered

Apr 14, 2025

Filed

vs. sector median

+43 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_cf549989ad2ba1ac2025-04-14Candidate
Nebraska State AGbd_f2db12a91b155bb52025-04-14Verified
Massachusetts State AGbd_f65170d9266271902025-04-14Verified
New Hampshire State AGbd_589e70d75d907c312025-04-21 · +7dVerified

Show 1 more filing ↓up to 17d gap

Illinois State AGbd_7723fa4962b22a662025-05-01 · +17dVerified

Name: Medical Express Ambulance Inc.
norm: medical express ambulance

Name: Medical Express Ambulance Inc.
norm: medical express ambulance
Also named: Medical Express Ambulance Inc.dba oflegal entity
MedEx Ambulancedba oftrade name
Industry: HealthcarellmTransportation & Logisticsllm

Discovered: Mar 18, 2024
Materiality determined: —
Notification sent: Apr 11, 2025
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)Health (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unknown
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Disconnected all access to the network
Engaged a specialized third-party cybersecurity firm
Engaged IT personnel to assist with securing the environment
Conducted a comprehensive forensic investigation
Changed administrative credentials
Notified law enforcement
Implemented an organization-wide credential reset of all users
Restructured and enhanced security systems
Upgraded data management software
Engaged a third-party notice vendor to assist with mailings, call center, and provide identity theft protection services
Providing 12 months of complimentary credit monitoring and identity theft restoration services through HaystackID
Changes made: Enhanced network security to prevent a similar incident from occurring in the future
Restructured and enhanced security systems
Upgraded data management software
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(392 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGApr 14 · first

Nebraska State AGApr 14 · first

Massachusetts State AGApr 14 · first

Vermont State AGApr 14 · first · this page

New Hampshire State AG+7d

Illinois State AG+17d

Pattern: first filing Apr 14 (MT), last May 1 (IL) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-04-14-medical-express-ambulance-service-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2025
Raw hash: 3c7ff1ac4327cdf39d6806da24cc249ff5c1d855b07c980fb100e54ed69009e2

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMedical Express Ambulance Inc.

Victim entityMedical Express Ambulance Inc.

Incidentdiscovered Mar 18, 2024

Stated responseDisconnected all access to the network

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov