"New York Emergency Services Provider Says Patient Data Stolen in Ransomware Attack"
It has recently been discovered that the personal information of roughly 320,000 individuals was compromised following a ransomware attack at New York-based ambulance services provider Empress EMS (Emergency Medical Services). The organization provides emergency transportation services and emergency and non-emergency response services to hospitals, private care facilities, and correctional institutions. Empress EMS has more than 200 employees. In a data breach notice posted on its website, Empress EMS reveals that on July 14, 2022, it identified a ransomware attack that resulted in some of its systems being encrypted. An investigation into the incident revealed that the attackers had gained access to the organization’s network in late May and that they stole patient data before deploying ransomware on the compromised systems. According to the company, the exfiltrated files contained personal information such as names and Social Security numbers, but also patient data such as dates of service and insurance information. The emergency services provider says it has already started informing the impacted patients of the incident. Empress EMS did not provide further details on the type of ransomware that was used in the attack, but the Hive ransomware gang boasted that they were behind the incident. The Hive operators apparently contacted Empress EMS to inform them that they stole over 280 gigabytes of data, including business files, private company information, employee data, customer data, and more. It is currently unclear whether Empress EMS paid a ransom to prevent the data leakage.