Acadian Ambulance Service, a Louisiana-based private ambulance company serving roughly 24 million residents across four states, suffered a ransomware attack carried out by the Daixin Team between June 19 and June 21, 2024. The attackers gained unauthorized access to Acadian's network, exfiltrated patient files, and were detected on June 21 when the company isolated affected systems. Daixin Team demanded a $7 million ransom and claimed to have stolen 10 million records. Acadian countered with $173,000 and did not meet the demand. The company reported the breach to the U.S. Department of Health and Human Services on August 20, 2024, disclosing that approximately 2.9 million individuals were affected. The published record count stands at 2.5 million. The exposed data included names, Social Security numbers, dates of birth, phone numbers, medical record numbers, and treatment information collected during patient intake. For many people, contact with an ambulance service happens during a medical emergency, making this an unexpected source of credential exposure. Social Security numbers paired with medical and personal details create conditions for identity theft, medical fraud, and insurance abuse. Scammers can also use medical context to make targeted phishing attempts more convincing. Acadian began notifying affected individuals in November 2024 and offered complimentary credit monitoring through CyEx. A consolidated class-action lawsuit was subsequently filed against the company. Acadian moved to dismiss, arguing plaintiffs had not demonstrated actual harm, and a federal magistrate judge had not yet ruled on that motion as of mid-2025. Affected individuals should monitor their credit reports, review their health insurance statements for unfamiliar claims, and consider placing a fraud alert or security freeze with the major credit bureaus.

Medical transportation providers collect patient intake and transport records, including names, SSNs, dates of birth, addresses, and detailed medical information tied to emergency and non-emergency care.

Acadian Ambulance has continued operating across its service territory following the 2024 breach. The company has engaged in post-incident security improvements. The consolidated class-action litigation and its attempted dismissal remain pending as of early 2026. No major structural changes have been reported beyond the breach response context.