
Survival Flight, Inc., a leading emergency medical transportation provider, recently experienced a data breach that exposed sensitive patient and customer information. The incident, which was discovered on July 17, 2025, may have affected 97,217 people, according to the company's report to the U.S. Department of Health and Human Services (HHS). This includes 14 Massachusetts residents and 10 Montana residents.
The breach was the result of unauthorized access to Survival Flight’s network by a threat actor known as Worldleaks, who posted about the incident on the dark web on Sept. 12, 2025.
The attackers claimed to have exfiltrated data from the company’s systems and subsequently leaked it on a Tor network. Survival Flight confirmed that an unauthorized third party gained access to a limited subset of files, containing both personally identifiable information (PII) and protected health information (PHI).
The types of information exposed include names, addresses, dates of birth, Social Security numbers, financial account details, medical records, patient account numbers, health insurance information and specific medical treatment details.
The company published a notice of the incident on its website, as well as filed disclosures with the Massachusetts Office of Consumer Affairs and Business Regulation and the Montana Attorney General. Survival Flight reported the breach to HHS on Sept. 15, 2025. The company said it identified the people who may have been affected on Feb. 19, 2026, and its letters to them are dated March 6, 2026.
To support those affected, Survival Flight is offering complimentary single-bureau credit monitoring and fraud assistance services through Cyberscout, a TransUnion company. Depending on the letter, these services last 12 or 24 months and include credit file monitoring and alerts.
Enrollment instructions and a unique code were provided in the notification letter. Affected individuals must sign up within 90 days of the date on their letter.
Survival Flight also recommends that individuals remain vigilant by reviewing their credit reports, monitoring account statements and considering placing fraud alerts or security freezes with the major credit bureaus.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)