Clustered 5 filings across 5 jurisdictions · filing window Dec 27, 2023 → Dec 31, 2023. View entity profile → Other incidents for this victim →
incident inc_b466ebde60834bfc · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
Health (basic) · Identity (basic) · Government ID
CA MA MT NH VT
HHS OCR · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Feb 17, 2023 → Apr 22, 2023
When the intrusion reportedly occurred, per the linked filings
Apr 21, 2023
Reported by VERMONT AG, NEW HAMPSHIRE AG, CALIFORNIA AG filings
Fallon Ambulance Services, a former subsidiary of Transformative Healthcare (the covered entity), reported a ransomware attack that compromised the PHI of 911,757 individuals. Breached information was located on Electronic Medical Record and Network Server systems. Exposed data included names, addresses, birthdates, driver's license and Social Security numbers, diagnoses, lab results, medications, and claims/treatment information. The CE notified HHS, affected individuals, the media, and offered identity protection services. OCR closed the case after Fallon ceased operations.
Affected (this filing): 911,757
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Transformative Healthcare, on behalf of its former subsidiary Fallon Ambulance Service, disclosed a data breach affecting archived patient records. Unauthorized access occurred between Feb 17 and Apr 22, 2023, detected after Fallon ceased operations in Dec 2022. Impacted data likely included PII. No evidence of fraud found. Free identity protection offered. Federal law enforcement consulted.
Fallon Ambulance Services reported a data breach to the Montana Attorney General. The breach was reported on 2023-12-27. The breach occurred from 2/17/2023 to 4/22/2023. 111 Montana residents were affected.
Affected (this filing): 111
Fallon Ambulance Services, a subsidiary of Transformative Healthcare, notified the NH Attorney General of unauthorized access to archived patient data. Suspicious activity was detected on April 21, 2023, affecting activity occurring between Feb 17 and April 22, 2023. Approximately 63,523 NH residents were impacted. Personal information was obtained by an unauthorized party. Fallon engaged third-party specialists, consulted federal law enforcement, and offered two years of identity protection services.
Affected (this filing): 63,523
Fallon Ambulance Service, a medical transportation company that ceased operations in December 2022, experienced unauthorized access to its archived data storage. The incident occurred between February 17, 2023, and April 22, 2023, and was detected on April 21, 2023. An unauthorized party obtained files containing personal information, including potential PHI and PII. Fallon engaged third-party specialists and federal law enforcement. Affected individuals are offered two years of free identity protection services.