UnknownHealthcareHealthcareGovernment IDHealth (basic)Medium

Aesto Health

bd_ed89224a3d3fa39d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 31, 2026

To disclose

—

Affected

91state residents only

Linked

13 filings

Confidence

95%

Full breach record for Aesto Health →2 incidents on file

Aesto Health reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-31. The reporting organization type is Health Care. 91 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 31, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 13 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_49a6928816a82c852026-08-01 · +1dVerified
Washington State AGbd_6ba6b179ea4373bf2026-08-04 · +4dVerified
Oregon State AGbd_ffdc3411341bf72d2026-08-05 · +5dVerified
California State AGbd_65f70444b3fbe6f72026-08-24 · +24dVerified

Show 6 more filings ↓up to 84d gap

Massachusetts State AGbd_a7593a37841d8ff02026-09-01 · +32dVerified
Massachusetts State AGbd_b1d347b681553e3a2026-09-01 · +32dVerified
New Hampshire State AGbd_7148309868a16c342026-09-25 · +56dVerified
Vermont State AGbd_8145059268bb2d362026-09-25 · +56dVerified
California State AGbd_b3f56c134cd959942026-10-01 · +62dVerified
New Hampshire State AGbd_be053c291c764c092026-10-23 · +84dVerified

Showing first 10 of 12 linked disclosures.

Name: Aesto Health
norm: aesto health
Domain: aestohealth.com

Name: Aesto Health
norm: aesto health
Domain: aestohealth.com
Industry: Healthcareregulator portal

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 91state-resident count only
Data types: —
Data elements: Social Security numberMedical information
Attack vector: Unknown

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Vermont State AGJul 31 · first · this page

Illinois State AG+1d

Washington State AG+4d

Oregon State AG+5d

California State AG+24d

Massachusetts State AG+32d

New Hampshire State AG+56d

Vermont State AG+56d

California State AG+62d

New Hampshire State AG+84d

Pattern: first filing Jul 31 (VT), last Oct 23 (NH) — a 84-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/categories/security-breach-notices
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2026
Raw hash: a0c0a30ad693435bcaf4798fbad12eb253e820885a30041d04e814b403118f6a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAesto Health

Victim entityAesto Health

IncidentUnknown

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov