Transformative Healthcare, on behalf of Fallon Ambulance Services

Transformative Healthcare, on behalf of Fallon Ambulance Services in Massachusetts, experienced a significant data breach that affected 911,757 individuals. This breach was disclosed following unauthorized activity detected in Transformative Healthcare’s archive environment on April 21, 2023. The unauthorized access persisted until April 22, 2023, during which files containing sensitive personal and medical information were copied. The compromised data included names, addresses, Social Security numbers, medical information (including COVID-19 testing and vaccination details), and employment-related information. Despite the breach, there has been no evidence to suggest that the stolen data has been misused.

Fallon Ambulance Service, which provided medical transportation services in the greater Boston area, ceased operations in December 2022 after being acquired by Coastal Medical Transportation Systems in September 2022. However, Transformative Healthcare retained an archived copy of data previously stored on Fallon’s computer systems to comply with legal data retention requirements.

The breach has led to legal action against Transformative Healthcare, with a lawsuit filed in the U.S. District Court for the District of Massachusetts on behalf of affected individuals. The lawsuit alleges negligence, breach of implied contract, and failure to implement adequate cybersecurity measures, among other claims. Affected individuals were notified by mail on December 27, 2023, and offered credit monitoring and identity theft protection services.

This incident has been reported to the U.S. Department of Health and Human Services Office for Civil Rights and is under investigation[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17].

Citations:

1. https://www.hipaajournal.com/fallon-ambulance-service-data-breach/
2. https://apps.web.maine.gov/online/aeviewer/ME/40/4ed066da-9f8f-4685-863a-e51c785d7744.shtml
3. https://www.myinjuryattorney.com/fallon-ambulance-service-data-breach-class-action-investigation-and-lawsuit-assistance/
4. https://therecord.media/transformative-healthcare-data-breach-ambulance
5. https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
6. https://healthitsecurity.com/news/fallon-ambulance-service-data-breach-impacts-911k-individuals
7. https://www.idstrong.com/sentinel/transformative-healthcare-data-stolen-from-900k-victims/
8. https://www.jdsupra.com/legalnews/transformative-healthcare-notifies-911-8909019/
9. https://www.prnewswire.com/news-releases/console–associates-pc-transformative-healthcare-reports-data-breach-at-fallon-ambulance-services-exposed-social-security-numbers-of-as-many-as-911k-individuals-302024712.html
10. https://www.bitdefender.com/blog/hotforsecurity/data-breach-at-defunct-ambulance-service-affects-nearly-1-million-patients-in-the-us/
11. https://thecyberexpress.com/transformative-healthcare-cyber-attack-data/amp/
12. https://www.jdsupra.com/legalnews/fallon-ambulance-service-announces-data-2101865/
13. https://www.hipaajournal.com/december-2023-healthcare-data-breach-report/
14. https://www.securitymagazine.com/articles/100316-fallon-ambulance-announces-data-breach-affecting-over-900-000-patients
15. https://www.securityweek.com/over-900k-impacted-by-data-breach-at-defunct-boston-ambulance-service/
16. https://cybernews.com/news/transformative-fallon-attack-exposed-million/
17. https://www.paubox.com/news/hmg-healthcare-breach-exposes-data-of-multiple-facilities