Empress Ambulance Svc Company Cyber Security Posture
empressems.comSince its inception in 1985, Empress has made a firm commitment to the development of Emergency Medical Services and quality after-care transportation in New York and Westchester County. We’ve responded to over one million calls for help with over 500 highly trained employees. We Bring The Emergency Room To You!
EAS Company Details
empress-ambulance-svc
258 employees
641
62
Hospitals and Health Care
empressems.com
Scan still pending
EMP_1774825
In-progress
EAS Risk Score (AI oriented)Between 800 and 900
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
EAS Global Score.png)
Empress Ambulance Svc Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 800 and 900 |
Empress Ambulance Svc Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Empress Ambulance Svc | Breach | 100 | 7 | 09/2022 | EMP208161122 | Link | |
Rankiteo Explanation : Attack that could injure or kill peopleDescription: Empress EMS (Emergency Medical Services), a New York-based emergency response and ambulance service provider suffered from data breach after ransomware attack. The attacker had gained access to Empress EMS’ systems and exfiltrated “a small subset of files,” a day before deploying the encryption. The compromised information includes patient names, dates of service, insurance information, and in some instances, Social Security numbers. Empress informed the US, 318,55 people have been impacted by this occurrence, according to the Department of Health and Human Services. Empress EMS is sending letters to those affected and providing credit monitoring services to those who qualify. | |||||||
| Empress Ambulance Svc | Ransomware | 100 | 5 | 09/2022 | EMP235451222 | Link | |
Rankiteo Explanation : Attack threatening the organization's existenceDescription: Empress EMS in New York was hit by the Hive ransomware group that affected 318,558 patients. An unauthorized individual gained access to their system and encrypted files on their system and threatened them to not try to delete or change the encrypted files. The group exfiltrated information like contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc. | |||||||
Empress Ambulance Svc Company Subsidiaries
Since its inception in 1985, Empress has made a firm commitment to the development of Emergency Medical Services and quality after-care transportation in New York and Westchester County. We’ve responded to over one million calls for help with over 500 highly trained employees. We Bring The Emergency Room To You!
Access Data Using Our API
Get company history
Rapid.png)
EAS Cyber Security News
N.Y. private service faces class action suit after waiting to tell patients about data breach
NEW YORK — A private ambulance company is facing a class action lawsuit linked to allegedly waiting months to tell patients that their personal ...
Empress Ambulance Service data breach $1.05M class action settlement
None
US announces it seized Hive ransomware gang’s leak sites and decryption keys
The infrastructure behind Hive, one of the most prolific ransomware operations, has been seized by law enforcement agencies in the United States and Europe.
EAS Similar Companies
Netcare
The Netcare Group (JSE: NTC) offers a unique, comprehensive range of medical services across the healthcare spectrum, enabling us to serve the health and care needs of each individual who entrust their care to us. Our focus on implementing sophisticated digital systems will enable us to provide care
Bupa
Bupa's purpose is helping people live longer, healthier, happier lives and making a better world. We are an international healthcare company serving over 38 million customers worldwide. With no shareholders, we reinvest profits into providing more and better healthcare for the benefit of current an
Lifespan
Formed in 1994, Brown University Health (Formerly Lifespan) is a not-for-profit health system based in Providence, RI comprising three teaching hospitals of The Warren Alpert Medical School of Brown University: Rhode Island Hospital and its Hasbro Children's; The Miriam Hospital; and Bradley Hospita
Sentara Health
Sentara Health, an integrated, not-for-profit health care delivery system, celebrates more than 130 years in pursuit of its mission - "we improve health every day." Sentara is one of the largest health systems in the U.S. Mid-Atlantic and Southeast, and among the top 20 largest not-for-profit integr
Queensland Health
Queensland Health is the state's largest healthcare provider. We are committed to ensuring all Queenslanders have access to a range of public healthcare services aimed at achieving good health and well-being. Through a network of 16 Hospital and Health Services, as well as the Mater Hospitals, Quee
Boston Children's Hospital
Boston Children's Hospital is a 404-bed comprehensive center for pediatric health care. As one of the largest pediatric medical centers in the United States, Boston Children's offers a complete range of health care services for children from birth through 21 years of age. (Our services can begin int
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
EAS CyberSecurity History Information
How many cyber incidents has EAS faced?
Total Incidents: According to Rankiteo, EAS has faced 2 incidents in the past.
What types of cybersecurity incidents have occurred at EAS?
Incident Types: The types of cybersecurity incidents that have occurred incidents Breach and Ransomware.
How does EAS detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through communication strategy with Sending letters to those affected and providing credit monitoring services to those who qualify..
Incident Details
Can you provide details on each incident?
Incident : Ransomware
Title: Empress EMS Ransomware Attack
Description: Empress EMS in New York was hit by the Hive ransomware group that affected 318,558 patients. An unauthorized individual gained access to their system and encrypted files on their system and threatened them to not try to delete or change the encrypted files. The group exfiltrated information like contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc.
Type: Ransomware
Attack Vector: Unauthorized Access
Threat Actor: Hive Ransomware Group
Motivation: Data Exfiltration and Encryption
Incident : Data Breach and Ransomware Attack
Title: Empress EMS Data Breach and Ransomware Attack
Description: Empress EMS (Emergency Medical Services), a New York-based emergency response and ambulance service provider suffered from data breach after ransomware attack. The attacker had gained access to Empress EMS’ systems and exfiltrated “a small subset of files,” a day before deploying the encryption. The compromised information includes patient names, dates of service, insurance information, and in some instances, Social Security numbers. Empress informed the US, 318,55 people have been impacted by this occurrence, according to the Department of Health and Human Services. Empress EMS is sending letters to those affected and providing credit monitoring services to those who qualify.
Type: Data Breach and Ransomware Attack
Attack Vector: Ransomware
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Breach.
Impact of the Incidents
What was the impact of each incident?
Incident : Ransomware EMP235451222
Data Compromised: contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc.
Incident : Data Breach and Ransomware Attack EMP208161122
Data Compromised: patient names, dates of service, insurance information, Social Security numbers
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc., patient names, dates of service, insurance information and Social Security numbers.
Which entities were affected by each incident?
Incident : Ransomware EMP235451222
Entity Type: Healthcare
Industry: Emergency Medical Services
Location: New York
Customers Affected: 318558
Incident : Data Breach and Ransomware Attack EMP208161122
Entity Type: Emergency Medical Services
Industry: Healthcare
Location: New York
Customers Affected: 31855
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach and Ransomware Attack EMP208161122
Communication Strategy: Sending letters to those affected and providing credit monitoring services to those who qualify.
Data Breach Information
What type of data was compromised in each breach?
Incident : Ransomware EMP235451222
Type of Data Compromised: contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc.
Number of Records Exposed: 318558
Sensitivity of Data: High
Data Exfiltration: True
File Types Exposed: contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc.
Personally Identifiable Information: True
Incident : Data Breach and Ransomware Attack EMP208161122
Type of Data Compromised: patient names, dates of service, insurance information, Social Security numbers
Number of Records Exposed: 31855
Data Exfiltration: a small subset of files
Personally Identifiable Information: patient names, Social Security numbers
Ransomware Information
Was ransomware involved in any of the incidents?
Incident : Ransomware EMP235451222
Ransomware Strain: Hive
Data Encryption: True
Data Exfiltration: True
Incident : Data Breach and Ransomware Attack EMP208161122
Data Encryption: deploying the encryption
Data Exfiltration: a small subset of files
References
Where can I find more information about each incident?
Incident : Data Breach and Ransomware Attack EMP208161122
Source: Department of Health and Human Services
Where can stakeholders find additional resources on cybersecurity best practices?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Department of Health and Human Services.
Investigation Status
How does the company communicate the status of incident investigations to stakeholders?
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through was Sending letters to those affected and providing credit monitoring services to those who qualify..
Additional Questions
General Information
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Hive Ransomware Group.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc., patient names, dates of service, insurance information and Social Security numbers.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were contracts, NDA and other agreements documents, company private info (budgets, plans, investments, company bank statements, etc.), employees info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), customers info (SSN numbers, emails, addresses, passports, phone numbers, payments, working hours, etc.), SQL databases with reports, business data, customers data, etc., patient names, dates of service, insurance information and Social Security numbers.
What was the number of records exposed in the most significant breach?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.2K.
References
What is the most recent source of information about an incident?
Most Recent Source: The most recent source of information about an incident is Department of Health and Human Services.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
