Security News > 2022 > September > New York ambulance service discloses data breach after ransomware attack
Empress EMS, a New York-based emergency response and ambulance service provider, has disclosed a data breach that exposed customer information.
According to the notification, the company suffered a ransomware attack on July 14, 2022.
"Some of these files contained patient names, dates of service, insurance information, and in some instances, Social Security numbers," reads the disclosure from Empress EMS. "Empress EMS is mailing letters to affected individuals and offering eligible individuals credit monitoring services," the company announced.
The details of the attack describe a standard double-extortion ransomware incident where cybercriminals steal files, encrypt systems, and then threaten the victim to publish the data unless a ransom is paid.
BleepingComputer found that the Hive ransomware gang had prepared on July 26 a non-public entry for the Empress EMS data leak.
The ransomware gang has removed the associated entry from their website, but we were able to verify that Hive published the data after checking historical dark web data from cyber-intelligence firm KELA. Empress informed the U.S. Department of Health and Human Services that the number of individuals affected by this incident is 318,55.
News URL
Related news
- Texas State Bar warns of data breach after INC ransomware claims attack (source)
- HPE notifies employees of data breach after Russian Office 365 hack (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- Sarcoma ransomware claims breach at giant PCB maker Unimicron (source)
- RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset (source)
- Chinese espionage tools deployed in RA World ransomware attack (source)
- Lee Enterprises newspaper disruptions caused by ransomware attack (source)
- Fintech giant Finastra notifies victims of October data breach (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)