Pasquotank-Camden Emergency Medical Service

Pasquotank-Camden Emergency Medical Service is an emergency medical services agency that provides pre‑hospital care and patient transport for the communities it serves. As indicated by its name, the organization operates in the Pasquotank and Camden county area, responding to medical emergencies, traumatic injuries, and other urgent health situations. Its core functions include deploying ambulances staffed with emergency medical technicians and paramedics, delivering basic and advanced life support interventions, and stabilizing patients before arrival at definitive care facilities. The agency works in coordination with local hospitals, fire departments, and public safety officials to ensure a seamless continuum of care from the scene of an incident to the emergency department. By maintaining a fleet of emergency vehicles and a trained workforce, Pasquotank‑Camden EMS aims to reduce response times and improve outcomes for residents and visitors in its jurisdiction.

The organization handles protected health information as part of its patient care and billing processes, making it subject to federal privacy regulations such as HIPAA. In December 2018, a previously unknown vulnerability in a third‑party billing software was exploited, allowing an unauthorized user to access EMS systems and view health records dating back over ten years for roughly 40,000 individuals. Although the intruder erased files, no data were exfiltrated and no ransom demand was made; the breach was discovered, the vulnerability was patched by the software vendor, and the EMS restored its operational data without interrupting emergency response activities. Following the incident, Pasquotank‑Camden EMS offered credit monitoring and identity restoration services to potentially affected patients and began evaluating a move to cloud‑based platforms or alternative software solutions to strengthen its cybersecurity posture. The episode highlighted the agency’s reliance on external billing applications and underscored the importance of rigorous vendor risk management for entities that manage sensitive medical data. These experiences have contributed to the organization’s focus on maintaining both clinical readiness and information security resilience.