Threat actor claims leak of 600K records with SSNs from Acadian Ambulance
A threat actor on an underground forum claims to hold about 600,000 CSV records labeled 2024 tied to people from Acadian Ambulance Services, an emergency medical transport provider in Louisiana, Texas, Mississippi and Tennessee. Displayed fields include full name, date of birth, Social Security number and address; a sample is public and the full file sits behind a paywall. The claim is unconfirmed by the company and unverified by third parties; patients should watch for phishing and consider a credit freeze, per the source.
What happened
A threat actor on an underground forum claims to hold about 600,000 records of people tied to Acadian Ambulance Services, an emergency medical transport provider in four southern US states. A sample showing name, date of birth and SSN was posted publicly; the full file requires payment. The company has not confirmed the incident and there is no independent verification.
Why it matters
If confirmed, the combination of name, date of birth and SSN enables identity theft and fraudulent credit applications, according to the source's analysis. The data would involve patients of a major US emergency medical transport provider. For now, it is only an attacker's claim.
What to do
Monitor Acadian's official channels for confirmation or a breach notification. If there is a commercial relationship or data exchange with the company, activate the incident response plan and check for shared data exposure. Patients should watch for phishing and consider a credit freeze, per the source.
For the technical team
- Affected
- Acadian Ambulance Services Base alegada de cerca de 600 mil registros ligados à Acadian Ambulance Services, provedora de transporte médico de emerg · About 600,000 people tied to Acadian Ambulance Services, per the claim; no product or version cited.
- Exploitation
- Breach claim on an underground forum reported by DailyDarkWeb; a sample of records is public and the full file is behind a paywall. No independent verification and no confirmation from Acadian.
- Fix
- Not applicable to a data leak; mitigation cited by the source: patients watch for phishing and place a credit freeze.
- More details
- CSV labeled 2024. Fields cited: full name, gender, date of birth, SSN, ethnicity, address, county, ZIP and home phone. Acadian operates in Louisiana, Texas, Mississippi and Tennessee. Single source (@DailyDarkWeb), which frames the case as an unverified claim, not a confirmed breach.
Timeline
Incident entered the radar with the unverified claim of a 600K-record leak including SSNs.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
