Ambulnz Holdings reports data breach impacting patients from major health systems

Ambulnz Holdings, a medical transportation company based in New York and operated by DocGo, has filed a notice of a significant data breach with the Attorney General of California. The breach, discovered in April 2024, involved unauthorized access to Ambulnz’s IT network, potentially compromising the sensitive personal information of patients from several prominent healthcare systems, including Jefferson Health, Main Line Health, Mount Sinai Health System, and UCHealth.

The breach was detected on April 22, 2024, when Ambulnz identified unusual activity within its IT network. Immediate actions were taken to secure the systems, including notifying law enforcement and launching a comprehensive investigation. The investigation revealed that an unauthorized party accessed the network between April 21 and April 22, 2024, when the intruder downloaded files containing confidential patient information.

On May 7, 2024, Ambulnz confirmed that the compromised data included sensitive information belonging to patients, such as names, Social Security numbers, dates of birth, addresses, and medical information. This breach affects patients transported by Ambulnz and those receiving care from the associated healthcare systems.

Following the discovery, Ambulnz undertook a detailed review of the compromised files to determine the specific data exposed and the individuals impacted. Between June 21 and August 13, 2024, the company sent out notification letters to all affected individuals detailing the nature of the compromised information and providing guidance on protecting themselves from potential identity theft and fraud.

Founded in 2017, Ambulnz Holdings offers mobile medical services across the United States and employs a staff of 3,500 paramedics and EMTs. DocGo, the parent company of Ambulnz, supports over 6,000 employees and generates approximately $703 million in annual revenue.