NorthStar Emergency Medical Services

NorthStar Emergency Medical Services (NorthStar EMS) in Alabama experienced a significant data breach that was first detected on September 16, 2022, when the company noticed unusual activity in its digital environment. NorthStar EMS responded by securing its network and initiating an investigation with the help of independent cybersecurity experts. The investigation revealed that an unauthorized actor had accessed certain data on the network.

The review of the accessed data concluded on March 8, 2023, and it was determined that the information of certain individuals might have been impacted. The potentially compromised data includes names, Social Security numbers, dates of birth, patient ID numbers, treatment information, and Medicare/Medicaid numbers, as well as health insurance information

NorthStar EMS has stated that there is no evidence that the information accessed has been misused. However, as a precaution, the company has informed the affected individuals and recommended steps to protect their information, such as monitoring their accounts and credit reports for any suspicious activity. NorthStar EMS has also reported the incident to law enforcement and has made changes to its cybersecurity environment to prevent future incidents. Additionally, the company has set up a toll-free call center to answer questions about the breach, available Monday through Friday from 8 am to 8 pm CST at 833-753-4562

The data breach could potentially impact up to 82,450 patients, and NorthStar EMS has begun notifying these individuals via mail. The company is also offering 12 months of complimentary credit monitoring to those affected

The incident has not yet appeared on the U.S. Department of Health and Human Services’ public breach tool but is expected to be listed there in the future, as NorthStar EMS is a HIPAA-covered entity

This breach comes at a time when NorthStar EMS has been facing other challenges, including financial losses leading to the announcement of halting ambulance service in the northern half of Talladega County starting August 1, 2023