State records show Medical Express Ambulance Inc. dba MedEx Ambulance notified the New Hampshire Attorney General of a data breach on April 21, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official New Hampshire AG notice for Medical Express Ambulance Inc. dba MedEx Ambulance identifies the following exposed data:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Medical Express Ambulance Inc., operating as MedEx Ambulance, functions as a critical lifeline within the emergency medical services sector. Providing specialized patient transport, advanced life support, and inter-facility transfers, the organization interacts intimately with vulnerable populations during moments of profound medical need. To coordinate dispatch logistics, secure insurance pre-authorizations, and integrate seamlessly with hospital networks, MedEx Ambulance necessarily collects and maintains exhaustive repositories of sensitive patient data. This operational profile means the company holds an immense volume of deeply personal information, transforming routine medical transport records into attractive targets for malicious actors seeking high-value personal data.
In 2025, MedEx Ambulance reported a significant data security incident to the New Hampshire Attorney General's office. While the precise vector remains under active investigation, incidents affecting emergency medical transport providers typically involve unauthorized access to administrative or billing databases, compromise of third-party electronic health record vendors, or sophisticated ransomware deployments. In the healthcare transportation sector, cybercriminals frequently exploit legacy infrastructure, vulnerable remote access portals, or third-party dispatch integrations to bypass perimeter defenses, exfiltrating confidential digital assets before security teams can detect and isolate the intrusion.
The exposure resulting from this security failure compromises some of the most intimate and sensitive categories of personal information imaginable. Victims face the severe risk of having their full names, dates of birth, Social Security numbers, health insurance policy details, and comprehensive medical treatment or transport history exposed to unauthorized parties. Unlike standard retail breaches where credit cards can be cancelled, medical and demographic data cannot be easily altered. The exposure of diagnostic and transport records creates immediate avenues for medical identity theft, fraudulent insurance claims, and targeted phishing schemes that exploit a patient's known health conditions or emergency hospitalizations to extract further financial assets.
As a healthcare-related entity managing protected health information, Medical Express Ambulance Inc. dba MedEx Ambulance was bound by stringent legal duties under the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable state consumer protection statutes. These regulatory frameworks mandate the implementation of rigorous administrative, physical, and technical safeguards—including robust encryption, multi-factor authentication, continuous network monitoring, and regular vulnerability assessments—to prevent unauthorized disclosures. The occurrence of a widespread data breach strongly suggests a failure to maintain these mandated security standards, potentially exposing the company to significant statutory liability for negligence and breach of implied contract.
Receiving a data breach notification letter from MedEx Ambulance serves as official confirmation that your confidential medical and personal records were compromised as a direct result of corporate security shortcomings. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the company accountable for failing to safeguard your privacy. Victims do not need to demonstrate that financial fraud has already occurred to seek legal recourse; the increased risk of future identity theft and the invasion of privacy are actionable harms under the law. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Medical Express Ambulance Inc. dba MedEx Ambulance
You were a customer, patient, employee, or client of Medical Express Ambulance Inc. dba MedEx Ambulance
Your personal information was stored in Medical Express Ambulance Inc. dba MedEx Ambulance's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Your Medical Express Ambulance Inc. dba MedEx Ambulance notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Activate the complimentary credit monitoring referenced in Medical Express Ambulance Inc. dba MedEx Ambulance's letter — early fraud detection and a documented harm record both help your claim.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Claims windows close. Our team reviews Medical Express Ambulance Inc. dba MedEx Ambulance breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Medical Express Ambulance Inc. dba MedEx Ambulance's systems.
Reported to Attorney General
April 21, 2025
The New Hampshire AG received Medical Express Ambulance Inc. dba MedEx Ambulance's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the Medical Express Ambulance Inc. dba MedEx Ambulance matter depends on your state, the data involved, and the company's conduct.
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris