Bell Ambulance, a Milwaukee-based emergency medical services provider, recently updated the impact of a February 2025 data breach, notifying the Maine Attorney General’s Office that 237,830 individuals were affected. This is a significant jump from the initial estimate of 114,000 victims.

Incident Details

• Timeline: The breach occurred between February 7 and February 14, 2025. Bell Ambulance detected the intrusion on February 13, 2025.
• Perpetrator: The Medusa ransomware gang claimed responsibility for the attack, asserting they had stolen approximately 220 GB of data.
• Investigation Completion: While initial notifications were sent in April 2025, Bell Ambulance only completed its full forensic investigation into the compromised data on February 20, 2026.

Compromised Information

The stolen data includes highly sensitive personal, medical, and financial details:

• Personal: Full names, dates of birth, Social Security numbers, and driver’s license numbers.
• Medical: Medical information and health insurance details.
• Financial: Financial account information.

Response and Protection

• Notifications: Bell Ambulance has been sending notification letters in phases, with the most recent round following the conclusion of their investigation in early 2026.
• Services Offered: Impacted individuals are being offered 12 to 24 months of complimentary credit monitoring and identity protection services through IDX.
• Legal Action: Several law firms, including Edelson Lechtzin LLP and Morgan & Morgan, are investigating potential class-action lawsuits.