Survival Flight notifies patients of email breach

The emergency medical transportation company recently experienced an email-related data breach. 

What happened

Survival Flight, Inc. recently notified patients of a data breach. The company has not yet notified the Department of Health and Human Services (HHS), so the number of victims is unknown.

In a notice posted to their website on August 12th, Survival Flight provided some information on the incident. The organization, which provides services in Alabama, Arkansas, Florida, Georgia, Illinois, Missouri, Oklahoma, and Tennessee, stated that the incident was first discovered on July 17th, 2025. Upon discovery, Survival Flight immediately began working with a third-party cybersecurity team to assess, contain, and resolve the issue. 

The investigation determined some patient information may have been accessed, including names, address, medical treatment information, and health insurance information.

What was said

In their statement, Survival Flight said it “takes its responsibility to safeguard personal information seriously and regrets any concern this incident may have cause. As part of Survival Flight’s ongoing commitment to the security of information, the organization has taken steps to help reduce the likelihood of a similar event in the future.” 

Survival Flight also provided general advice and precautions individuals can take to protect medical information from theft or fraud. 

The big picture 

Although Survival Flight has not stated what caused the attack, some sources believe that WorldLeaks, a hacking group formerly known as Hunters International, may be responsible. The malicious organization claimed to have up to 2.8TB of data.  

This is the second data breach for Survival Flight in recent years, including a breach that took place in May 2024. This incident was also related to suspicious activity on employee email accounts, underscoring their email system’s vulnerability.  

Data breaches against emergency medical services can be particularly damaging, as they can slow down operations and increase stress on workers. In some cases, it can even hinder patient care, showing the human cost of data breaches. 

FAQs

Why do some organizations experience multiple breaches? 

Organizations may experience multiple breaches for varying reasons. In some cases, the attacks may be random and vastly different. In other cases, the organization may have a specific, unaddressed vulnerability. In this case, we don’t know why Survival Flight has experienced two breaches in close proximity. 

When will Survival Flight notify the HHS?

Organizations are required to notify the HHS within 60 days of discovering the breach. Despite the requirement, some organizations may take longer if the investigation is still ongoing.