Tapestry 360 Health

Aesto, LLC d/b/a Aesto Health experienced a network security incident impacting its AWS infrastructure between December 2 and December 18, 2025. The unauthorized access potentially exposed protected health information (PHI), including names, dates of birth, medical information, driver's license numbers, financial account numbers, health insurance info, ITINs, government IDs, and Social Security numbers. Aesto notified affected Covered Entity clients on June 26, 2026. No evidence of identity theft or fraud was found. The incident was contained to a limited portion of Aesto's AWS infrastructure.

Tapestry 360 Health notified the Massachusetts Attorney General of a data breach affecting personal information of minors. The notice mentions Rhode Island residents specifically (3 impacted). The company established a toll-free response line and offered credit monitoring via TransUnion, Experian, and Equifax. The specific nature of the breach, dates, and total affected count are not detailed in the provided excerpt.

Aesto LLC d/b/a Aesto Health, a healthcare data migration and archiving service provider, experienced a network security incident impacting its AWS infrastructure. An unauthorized actor accessed and copied data between December 2 and December 18, 2025. The incident was detected on December 18, 2025. Affected data included PHI, names, SSNs, driver's license numbers, and financial account numbers for patients of Covered Entity clients, including Tapestry 360 Health. Approximately 4 New Hampshire residents were affected. Aesto engaged forensic specialists, contained the incident, and notified clients and regulators.

Tapestry 360 Health reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-08-12. The reporting organization type is Health Care. 7 Vermont residents were affected. Categories of data breached: Social Security Numbers.