HackingStolen CredentialsCapture Stored DataData ExfiltratedIDENTITY_BASICHEALTH_BASICPHILowContained
ACADIAN AMBULANCE SERVICE, INC.
bd_cb0fcc1c34239851 · schema v1 · pii pii-v1
Full breach record for ACADIAN AMBULANCE SERVICE, INC. →Acadian Ambulance Service, Inc. notified Vermont consumers of a data breach occurring June 19-21, 2024. Unauthorized access to the network resulted in the exfiltration of names, addresses, and medical information (diagnoses, medications, treatments). Acadian engaged third-party specialists, reported to federal law enforcement, and offered credit monitoring services.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4f321266f3287ea5Oregon State AGfiled 2024-11-07(1d gap)Candidate
- bd_9998d911f6b37afdCalifornia State AGfiled 2024-11-07(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-08-acadian-ambulance-service-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 8, 2024
- Raw hash
- 2489f04d6db0cf2b4913cd69aa7f4f8b114147d0c8845a21c6ac7e62341f8f0e
Reporting entity
- Name
- ACADIAN AMBULANCE SERVICE, INC.norm: acadian ambulance service
Victim entity
- Name
- ACADIAN AMBULANCE SERVICE, INC.norm: acadian ambulance service
Incident
- Discovered
- Jun 21, 2024
- Materiality determined
- —
- Notification sent
- Nov 8, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- reported this event to federal law enforcement and government regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.