Skokie, Illinois – May 2, 2024 – Medical Express Ambulance Inc. D/B/A MedEx Ambulance (“MedEx”) recently experienced a data security incident that may have resulted in unauthorized access to patient health information and employee personal information. While this incident did not significantly impact our ability to serve our patients, this posting is intended to provide notice of the Incident, steps we are taking in response to the Incident, and resources available to help you protect against the potential misuse of information. At this time, we have not received any reports of related misuse of health information since the date of the Incident.

What Happened? On March 18, 2024, MedEx experienced a network disruption that impacted the functionality and access of certain systems. Upon discovery of this incident, MedEx immediately disconnected all access to the network and promptly engaged a specialized third-party cybersecurity firm and IT personnel to assist with securing the environment, as well as, to conduct a comprehensive forensic investigation to determine the nature and scope of the incident. While the forensic investigation remains ongoing, MedEx found evidence to suggest some MedEx files were accessed by an unauthorized actor. Please note that MedEx’s web-based systems, including Electronic Medical Record (“EMR”), human resource, and payroll systems were not impacted by the underlying incident.

Based on these findings, MedEx began reviewing the affected systems to identify the specific individuals and the types of information that may have been compromised. While this process remains ongoing, MedEx will notify affected individuals by mail as the information becomes available.

What Information Was Involved? Based on the investigation, the following information related to potentially impacted individuals may have been subject to unauthorized access: name; date of birth; demographic information, Social Security number, driver’s license number; medical information; financial claims information; and health insurance information. Please note that the information above varies for each potentially impacted individual. In light of the incident, we will provide affected individuals with Social Security numbers impacted  with complimentary credit monitoring and identity theft restoration services. Affected individuals will be notified by mail with enrollment information.

What We Are Doing? Data privacy and security are among MedEx’s highest priorities, and there are extensive measures in place to protect information in MedEx’s care. Since the discovery of the Incident, MedEx moved quickly to investigate, respond, and confirm the security of our systems. Specifically, MedEx engaged a specialized third-party cybersecurity firm, changed administrative credentials, notified law enforcement, and continues to enhance its network security to prevent a similar incident from occurring in the future. Additionally, MedEx took the following steps, including, but not limited to: disconnecting all access to the network; implementing an organization-wide credential reset of all users; and adding additional security tools. The review of the affected systems is still ongoing.

What You Can Do: We encourage you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious or unauthorized activity. Additionally, security experts suggest that you contact your financial institution and all major credit bureaus to inform them of such a breach and then take whatever steps are recommended to protect your interests, including the possible placement of a fraud alert on your credit file. Again, at this time, we have not received any reports of related misuse of personal health information since the date of the Incident.

Other Important Information: We recognize that you may have questions not addressed in this notice. If you have additional questions, please call 1-888-373-1949, Monday through Friday, 8:00 A.M. to 8:00 P.M. Central Time, except holidays.

MedEx sincerely regrets any inconvenience or concern that this matter may cause, and remains dedicated to ensuring the privacy and security of all information in our control.

Sincerely,

Michael F Pieroni

Chief Operating Officer

MedEx Ambulance Service