Bell Ambulance Data Breach Affected 237,830 People
Summary
Bell Ambulance reported that a breach discovered Feb. 13, 2025, affected 237,830 people, exposing personal, financial and medical information. The Medusa ransomware gang claimed the attack and demanded $400,000.
Key points
- Bell Ambulance reported in breach notifications filed in Maine that 237,830 people were affected.
- The company said stolen information included Social Security and driver’s license numbers, financial account details, medical information and health insurance information.
- Bell Ambulance became aware of the breach on Feb. 13, 2025, hired cybersecurity experts and began notifying some affected people in April; additional victims were identified through the fall.
- The Medusa ransomware gang claimed the attack at the time and demanded $400,000 in exchange for 219 GB of data.
- An FBI advisory said Medusa was responsible for more than 300 attacks on critical infrastructure organizations.
- The FBI described an investigation in which a second alleged Medusa actor claimed a ransom payment had been stolen and demanded the same ransom for the “true decryptor.”
Article Details
- Victim Organization
- Bell Ambulance
- Incident Type
- Ransomware attack and data breach
- Data Types Exposed
- Social Security numbers
- Driver’s license numbers
- Financial account information
- Medical information
- Health insurance information
- Affected Records
- 237,830 people
- Affected Data Size
- 219 GB of data was reported stolen
- Operational Impact
- Bell Ambulance hired cybersecurity experts to assist with recovery; no further operational disruption was reported.
- Ransom Or Extortion
- Medusa claimed the attack and demanded $400,000 in exchange for the reportedly stolen data. The article also describes a separate Medusa investigation involving alleged triple extortion.
- Claim Status
- confirmed