HackingHealthcareHealthcareSupply Chain (3P Vendor)Business Associate (HIPAA)Customer Data InvolvedData ExfiltratedHealth (basic)Identity (basic)Government IDPHIMediumContained

Greenwood County Hospital

bd_3bf9528c919c4026 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Aug 1, 2026

To disclose

—

Affected

4state residents only

Confidence

64%

Full breach record for Greenwood County Hospital →

Aesto, LLC, a healthcare data migration and archiving vendor for Greenwood County Hospital, experienced a network security incident impacting its AWS infrastructure. Unauthorized access occurred between December 2 and December 18, 2025, and was discovered on December 18, 2025. Protected health information, including full names and potentially other health data, for patients of Greenwood County Hospital may have been accessed or acquired. Aesto engaged external cybersecurity professionals and forensic investigators. The incident is contained. Credit monitoring services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 2, 2025

Begins

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Greenwood County Hospital
norm: greenwood county hospital
Domain: gwch.org

Name: Greenwood County Hospital
norm: greenwood county hospital
Domain: gwch.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Dec 2, 2025 – Dec 18, 2025
Materiality determined: —
Notification sent: Aug 19, 2026
Affected individuals: 4state-resident count only
Data types: Health (basic)Identity (basic)Government IDPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via Aesto, LLC

During the incident: Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals experienced in handling these types of incidents
Conducted extensive forensic investigation and manual document review
Set up a dedicated and confidential toll-free response line to respond to questions
Changes made: Offering a complimentary 24 months membership of Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance to help with any questions you might have or in event that you become a victim of fraud
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1390-greenwood-county-hospital/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: 75c225077dc1a0a37a28adc206d662e89ef70552f5cac6c89154cbb088295a82

Reporting entityGreenwood County Hospital

Victim entityGreenwood County Hospital

IncidentUnauthorized Access

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov