UnknownGovernment IDHealth (basic)Medium

Aesto Health

bd_57953be80de083c2 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Oct 30, 2026

To disclose

—

Affected

318state residents only

Linked

15 filings

Confidence

95%

Full breach record for Aesto Health →2 incidents on file

Aesto, LLC reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-30. The reporting organization type is Other Commercial. 318 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Health Records.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 30, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 15 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Texas State AGbd_2b90fba38b862ad52026-11-03 · +4dVerified
New Hampshire State AGbd_be053c291c764c092026-10-23 · +7dVerified
California State AGbd_b3f56c134cd959942026-10-01 · +29dVerified
New Hampshire State AGbd_7148309868a16c342026-09-25 · +35dVerified

Show 6 more filings ↓up to 87d gap

Vermont State AGbd_8145059268bb2d362026-09-25 · +35dVerified
Massachusetts State AGbd_a7593a37841d8ff02026-09-01 · +59dVerified
Massachusetts State AGbd_b1d347b681553e3a2026-09-01 · +59dVerified
California State AGbd_65f70444b3fbe6f72026-08-24 · +67dVerified
Oregon State AGbd_ffdc3411341bf72d2026-08-05 · +86dVerified
Washington State AGbd_6ba6b179ea4373bf2026-08-04 · +87dVerified

Showing first 10 of 14 linked disclosures.

Name: Aesto Health
norm: aesto health
Domain: aestohealth.com

Name: Aesto Health
norm: aesto health
Domain: aestohealth.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 318state-resident count only
Data types: Government IDHealth (basic)
Data elements: Social Security numberOther government idMedical information
Attack vector: Unknown

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Washington State AGAug 4 · first

Oregon State AG+1d

California State AG+20d

Massachusetts State AG+28d

New Hampshire State AG+52d

Vermont State AG+52d

California State AG+58d

New Hampshire State AG+80d

Vermont State AG+87d · this page

Texas State AG+91d

Pattern: first filing Aug 4 (WA), last Nov 3 (TX) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/categories/security-breach-notices
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2026
Raw hash: 46ec4d16f1f641de3005c298598840e416ec960223222b64200b5392167f3e5d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAesto Health

Victim entityAesto Health

IncidentUnknown

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov