Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible EMS1R data breach. According to dark web monitoring sources, a hacker group calling itself direwolf claimed responsibility for a cyberattack on EMS1R in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, EMS1R has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About EMS1R
EMS1R is a technology product developed by DiMana Systems, also associated with Square Lines LLC, based in the United States. It provides a “Business-in-a-Box” platform for emergency medical services organizations, offering computer-aided dispatch, mobile terminals, hospital integration, electronic patient care reporting, scheduling, and fleet management for ambulance companies, fire departments, and EMS providers. Because the platform serves EMS operations, it may handle dispatch records, patient care data, and employee information on behalf of its clients — though no source has confirmed what specific data types, if any, were involved in this incident.
What Happened?
EMS1R was listed in a ransomware leak-site allegation reported by Ransomware.live. On September 8th, 2026, the Direwolf ransomware group posted EMS1R on its dark-web leak site. This is an attacker-side claim only; no public confirmation from EMS1R, any regulator, or any independent news outlet has been found. The Ransomware.live entry claims approximately 110 GB of data was exfiltrated, but this figure is unverified. Notably, a separate report covering the same leak-site post states the post itself does not specify whether EMS1R’s systems were encrypted, whether data was exfiltrated, or any stated data volume — suggesting the 110 GB figure may reflect Ransomware.live’s own metadata enrichment rather than anything stated by the attacker. The leak-site description labels EMS1R as “Corporate Wellness Services,” which does not match EMS1R’s actual profile as an EMS technology and CAD platform; this mismatch may reflect attacker error in victim profiling.
The Direwolf ransomware group first surfaced in May 2025 and, as of September 7th, 2026, had claimed 127 victims across 36 countries, with known victims concentrated in healthcare (17%), technology (16%), and manufacturing (14%). No independent corroborating source has confirmed this specific incident against EMS1R.
Key Facts at a Glance
- Company or Organization: EMS1R (DiMana Systems / Square Lines LLC)
- Industry: Health IT / EMS Technology (software for emergency medical services operations)
- Location: United States (exact headquarters city not confirmed)
- Incident type: Ransomware leak-site allegation (attacker-side claim only)
- Source: Ransomware.live – Victim: EMS1R; RedPacket Security – DIREWOLF Ransomware Victim: EMS1R; Proven Data – Dire Wolf Ransomware; EMS1R official website
What Should You Do?
If you have any reason to believe your information may have been involved, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion. Monitor your financial accounts and credit reports closely, and request your free annual credit reports at AnnualCreditReport.com. If you believe your identity has been misused, visit IdentityTheft.gov for step-by-step guidance. Because EMS1R’s platform serves emergency medical services providers and may handle patient care records, you may also want to review any Explanation of Benefits statements from your health insurer and check your medical records for unexpected entries.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
