BEAUMONT, Texas — Acadian Ambulance has been notifying customers in November of a June 2024 data breach.
The company noticed "suspicious activity" on their network on June 21, 2024 and began to investigate, according to a statement on the company's website and a letter sent to customers that was obtained by 12News.
After investigating, the company says it determined that "certain files and folders were or may have been taken without authorization" between June 19 - 21, 2024, according to the letter.
Acadian then began working to identify which of their customers' data had been affected and is now notifying them. The customer letter that 12News obtained is dated November 7, 2024.
The company says they currently don't have any indication reports that any data has been used fraudulently.
Acadian customers are being offered 12 months of free credit monitoring and identity restoration services through a company called CyEx, according to the letter.
Some of the information that may have been exposed includes name, address, date of birth, and medical information collected during the patient intake process, which could include diagnosis, disability information, medications, and treatment information, according to the letter.
This is a developing story. We will update with more if and when we receive more confirmed information.
Here's the letter that is being sent to customers...
Acadian Ambulance Service, Inc. ("Acadian") is writing to inform you of a recent event that may impact the privacy of some of your information. Although at this time there is no indication that your information has been used to commit identity theft or fraud in relation to this event, we are providing you with information about the event, our response, and steps you may take to help protect your information, should you feel it necessary to do so.
What Happened? On or around June 21, 2024, we became aware of suspicious activity relating to certain systems within our network. We immediately took steps to secure our systems and launched an investigation with the assistance of third-party computer specialists to confirm the full nature and scope of the activity and to restore functionality to the affected systems. The investigation determined there was unauthorized access to Acadian's network between June 19, 2024, and June 21, 2024, and that certain files and folders were or may have been taken without authorization during that time. Upon becoming aware of this information, Acadian began a diligent and comprehensive review process to identify sensitive information that was contained within the impacted files, and to identify the individuals whose information may have been impacted. Acadian then worked to identify appropriate contact information for the impacted individuals. That process was recently completed, and we are notifying you because the investigation determined certain information related to you was contained within the impacted files.
What Information Was Involved? The investigation determined the following types of information related to you were present in the impacted systems and were or may have been taken without authorization: name, address, date of birth, and medical information collected during the patient intake process, which could include diagnosis, disability information, medications, and treatment information.
What We Are Doing. The confidentiality, privacy, and security of information within our care are among Acadian's highest priorities. Upon learning of the event, we promptly commenced an investigation and response that included confirming the security of our systems, reviewing the contents of relevant data for sensitive information, and investigating to determine the information that may be impacted. We also reported this event to federal law enforcement and government regulators. As part of our ongoing commitment to the privacy of information in their care, we are reviewing its policies, procedures and processes to reduce the likelihood of a similar future event.
Although we have no evidence of identity theft or fraud occurring as the result of this incident, as an added precaution, we are also offering you 12 months of credit monitoring and identity restoration services at no cost to you through CyEx. Enrollment instructions are enclosed with this letter.
