PhysicalHealthcareTransportation & LogisticsHealthcareTheftCustomer Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)Financial accountMediumContained

AIR METHODS CORPORATION

bd_e2e10677fdc743fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 9, 2023

Filed

Feb 22, 2024

To disclose

15 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for AIR METHODS CORPORATION →2 incidents on file

On November 9, 2023, a laptop containing patient information was stolen from an Air Methods billing office. The data included names, Social Security numbers, contact info, dates of service, insurance info, and diagnosis/treatment details. Air Methods filed a police report, changed account passwords, and offered one year of complimentary identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 9, 2023 → Notified Feb 21, 2024104d ✗ CA 60-day late15 weeks discovery → filing

Incident timeline

discovery → filing · 15 weeks / 105 days

Nov 9, 2023

Begins

Nov 9, 2023

Discovered

Feb 22, 2024

Filed

vs. sector median

+6 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_2e6f8b3e434f1b7b2024-02-22Candidate
Massachusetts State AGbd_9df9af1d34a1261d2024-02-23 · +1dVerified
Illinois State AGbd_fe5d352547e435232024-02-01 · +21dVerified

Name: AIR METHODS CORPORATION
norm: air methods

Name: AIR METHODS CORPORATION
norm: air methods
Industry: HealthcarellmTransportation & Logisticsllm

Discovered: Nov 9, 2023
Breach occurred: Nov 9, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 21, 2024
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)Health (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Filed a police report
Changed the password associated with the laptop’s user account
Confirmed that security tools were previously deployed on the device so that, if it connects to the internet, we will be alerted
Offering a one-year complimentary membership to Experian IdentityWorks Credit 3B
Changes made: Continue to assess and, where appropriate, enhance office security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(105 days from discovery to filing)
Compliance flags: CA 60-day late · 104d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 9, 2023
→ Notified: Feb 21, 2024
104d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 9, 2023 → Notified: Feb 21, 2024	104d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGFeb 1 · first

Montana State AG+21d

California State AG+21d · this page

Massachusetts State AG+22d

Pattern: first filing Feb 1 (IL), last Feb 23 (MA) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-581389
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2024
Raw hash: ecc16e8f00b8e0a2d410f688656fee6621768d94911baf3b32badc9efaf91a76

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAIR METHODS CORPORATION

Victim entityAIR METHODS CORPORATION

Incidentdiscovered Nov 9, 2023

Stated responseFiled a police report

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov