Everside Health
bd_3a91ce22cef72ff3 · schema v1 · pii pii-v1
Full breach record for Everside Health →2 incidents on fileEverside Health reported a data breach involving its third-party vendor, Aesto, LLC. Aesto, a healthcare data migration and archiving services provider, experienced a network security incident on its AWS infrastructure between December 2 and December 18, 2025. The breach potentially exposed protected health information (PHI) and personally identifiable information (PII) of a limited number of individuals. Aesto confirmed the unauthorized access on May 26, 2026, after forensic investigation. Everside Health was notified on June 26, 2026. No evidence of misuse was found, but affected individuals were offered credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 2, 2025
Begins
Jun 26, 2026
Discovered
Jul 31, 2026
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Washington State AGbd_550f8fa8c2068d842026-07-31Verified
- New Hampshire State AGbd_67f13a4222e410302026-07-31Verified
- Texas State AGbd_c97866167f4c4f182026-08-04 · +4dCandidate
- Illinois State AGbd_5fa45c6d3968fd882026-07-01 · +30dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jul 1 (IL), last Aug 4 (TX) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.