Transformative Healthcare
Disclosed Dec 27, 20232 years ago911,757 affectedConfirmed
Fallon Ambulance Services (Fallon), a former subsidiary of Transformative Healthcare, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 911,757 individuals. The PHI involved included names, addresses, birthdates, drivers’ license and Social Security numbers, diagnoses, lab results, medications, and claims and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary identity protection services to affected individuals. Fallon ceased medical transportation operations; therefore, OCR closed the case.
What is known
| People affected | 911,757 (as reported by the organization) |
|---|---|
| Disclosed | Dec 27, 2023 |
| Discovered | Apr 21, 2023 |
| Happened | Feb 17, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Transformative Healthcareoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Transformative Healthcareatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Transformative Healthcarejustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-12-27 Transformative Healthcare Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Transformative Healthcarein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Transformative Healthcare (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Dec 27, 2023 | |
| Indiana AGresidents of IN | Dec 27, 2023 | 438 |
| California AGresidents of CA | Dec 29, 2023 | |
| Washington AGresidents of WA | Dec 29, 2023 | 940 |
| Oregon DOJresidents of OR | Dec 29, 2023 | 911,757 |
| HHS archivetotal | Dec 31, 2023 | 911,757 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Fallon Ambulance Services (Fallon), a former subsidiary of Transformative Healthcare, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 911,757 individuals. · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 911757 · backfill source
- 2026-09-25 · disclosed: 2023-12-29 to 2023-12-27 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-04-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.