Ambulnz Holdings
Disclosed Jun 21, 20242 years ago43,773 affectedConfirmed
The covered entity (CE), Ambulnz Holdings, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 43,773 individuals. The PHI involved included names, Social Security numbers, addresses, drivers’ license numbers, dates of birth, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 43,773 (as reported to HHS) |
|---|---|
| Disclosed | Jun 21, 2024 |
| Happened | Apr 21, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Ambulnz Holdingsoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Ambulnz Holdings (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 21, 2024 | 43,773 |
| California AGresidents of CA | Aug 13, 2024 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 43773 · backfill source
- 2026-09-25 · disclosed: 2024-08-13 to 2024-06-21 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Ambulnz Holdings, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 43,773 individuals. The PHI involved included names, Social Security numbers, addresses · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.