DocGo Inc.

A threat actor spent four days inside DocGo's U.S. ambulance operation, long enough to copy names, Social Security numbers, insurance claims, and treatment records. The company called it a limited number of healthcare records; the notification list came to roughly 858,000 people. How the intruder got in was never named, which is its own architecture: a mobile-medical roll-up bolts ambulance services together faster than it maps where the trust boundaries sit.