City Ambulance Data Breach Affects 14,324 Texans: PHI Exposed

City Ambulance Service, operated by Viking Enterprises Inc., is a Texas-based ambulance and medical transport provider headquartered in Spring, Texas.

The company provides both emergency and non-emergency ground ambulance transport for hospitals, urgent care centers, convalescent homes, physicians, insurance companies, fire departments and private and public events. City Ambulance Service operates across several major Texas markets including Houston, San Antonio, Dallas, Austin and Port Arthur, and holds non-exclusive ambulance agreements with multiple Texas municipalities, according to public records.

The breach was reported to the Texas Attorney General on Sept. 1, 2026, with 14,324 Texas residents identified as affected. Details about when the company first discovered the incident and when it began notifying affected individuals were not available in the regulatory filing.

On July 19, 2026, the Qilin ransomware group posted a claim on the Tor network. In the posting, the group stated it had obtained data belonging to City Ambulance Service and announced that it intended to publish the stolen information within six to seven days.

The exact dates during which the attackers may have had access to the company's computer systems have not been made public. It is also unclear when the company first detected the intrusion, how the attackers gained entry to its systems or how long the internal investigation lasted before the disclosure was filed.

The types of information exposed in the breach included names, addresses, Social Security numbers, dates of birth, medical information and health insurance information.

City Ambulance Service's response to the breach

Individuals who believe they may have been affected should consider taking proactive steps to protect their personal and financial information.