HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Fallon Ambulance Services
bd_d00356114bbdcd1e · schema v1 · pii pii-v1
Full breach record for Fallon Ambulance Services →Fallon Ambulance Service, a medical transportation company that ceased operations in December 2022, experienced unauthorized access to its archived data storage. The incident occurred between February 17, 2023, and April 22, 2023, and was detected on April 21, 2023. An unauthorized party obtained files containing personal information, including potential PHI and PII. Fallon engaged third-party specialists and federal law enforcement. Affected individuals are offered two years of free identity protection services.
California clockDiscovered Apr 21, 2023 → Notified Dec 27, 2023250d ✗ CA 60-day late36 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_80bc1b119564c2f6New Hampshire State AGfiled 2023-12-28(1d gap)Verified
- bd_69bdd56750b2ff63HHS OCRfiled 2023-12-31(2d gap)Candidate
- bd_2847eb9a18943e5aVermont State AGfiled 2023-12-27(2d gap)Verified
- bd_cc199dfe8cb04b13Montana State AGfiled 2023-12-27(2d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578595
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2023
- Raw hash
- fbf888cac82cb92f49bb0ae02544f4f3bd3a89f08211bb0f59b0001ec11610bb
Reporting entity
- Name
- Transformative Healthcarenorm: transformative healthcare
- Domain
- transformativehc.com
Victim entity
- Name
- Fallon Ambulance Servicesnorm: fallon ambulance
Incident
- Discovered
- Apr 21, 2023
- Materiality determined
- —
- Notification sent
- Dec 27, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Consulted with federal law enforcement
Compliance
- Time to disclose
- 36 weeks(252 days from discovery to filing)
- Compliance flags
- CA 60-day late · 250d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 21, 2023→ Notified: Dec 27, 2023250d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.