HackingHealthcareHealthcareSupply Chain (3P Vendor)Business Associate (HIPAA)Customer Data InvolvedData ExfiltratedPHIIdentity (basic)Health (basic)LowContained

Greenwood County Hospital

bd_3bf9528c919c4026 · schema v1 · pii pii-v2

Severity

Low

Discovered

Dec 18, 2025

Filed

Aug 1, 2026

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for Greenwood County Hospital →

Aesto, LLC, a healthcare data migration and archiving vendor for Greenwood County Hospital, experienced a network security incident impacting its AWS infrastructure. Unauthorized access occurred between December 2 and December 18, 2025, and was discovered on December 18, 2025. Protected health information, including full names and potentially other health data, for patients of Greenwood County Hospital may have been accessed or acquired. Aesto engaged external cybersecurity professionals and forensic investigators. The incident is contained. Credit monitoring services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 16 days

Dec 2, 2025

Begins

Dec 18, 2025

Discovered

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Aesto Health
norm: aesto health
Domain: aestohealth.com

Name: Greenwood County Hospital
norm: greenwood county hospital
Domain: gwch.org
Industry: Healthcarellm

Discovered: Dec 18, 2025
Breach occurred: Dec 2, 2025 – Dec 18, 2025
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2026
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via Aesto, LLC

During the incident: Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals experienced in handling these types of incidents
Conducted extensive forensic investigation and manual document review
Set up a dedicated and confidential toll-free response line to respond to questions
Changes made: Offering a complimentary 24 months membership of Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance to help with any questions you might have or in event that you become a victim of fraud
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1390-greenwood-county-hospital/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: 75c225077dc1a0a37a28adc206d662e89ef70552f5cac6c89154cbb088295a82

Reporting entityAesto Health

Victim entityGreenwood County Hospital

Incidentdiscovered Dec 18, 2025

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov