HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Medical Express Ambulance Inc.
bd_b8194707753b0e0b · schema v1 · pii pii-v1
Full breach record for Medical Express Ambulance Inc. →Medical Express Ambulance Inc. (MedEx) notified consumers of a March 18, 2024 data breach involving unauthorized access to patient records. Compromised data included names, DOBs, SSNs, driver's licenses, and health insurance info. MedEx engaged forensic investigators, reset credentials, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cf549989ad2ba1acMontana State AGfiled 2025-04-14Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-14-medical-express-ambulance-service-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2025
- Raw hash
- 3c7ff1ac4327cdf39d6806da24cc249ff5c1d855b07c980fb100e54ed69009e2
Reporting entity
- Name
- Medical Express Ambulance Inc.norm: medical express ambulance
Victim entity
- Name
- Medical Express Ambulance Inc.norm: medical express ambulance
Incident
- Discovered
- Mar 18, 2024
- Materiality determined
- Apr 14, 2025
- Notification sent
- Apr 11, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(392 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.