Monroe County Health Center

Monroe Health Center, a healthcare provider in West Virginia, notified the New Hampshire Attorney General on September 2, 2026, of a breach involving its third-party vendor, Aesto LLC. The incident, discovered on August 7, 2026, involved unauthorized access to Aesto's AWS infrastructure between December 2 and 18, 2025. One New Hampshire resident's PHI, including name and SSN, was potentially accessed. Aesto engaged GuidePoint Security for forensic investigation, contained the breach, and offered 24 months of Experian credit monitoring.

Monroe County Health Center notified Massachusetts residents of a data security incident at its third-party vendor, Aesto, LLC, which provides healthcare data migration and archiving services. An unauthorized actor accessed protected health information (PHI), including names, demographics, and Social Security numbers, between December 2 and December 18, 2025. Aesto confirmed the access on May 26, 2026, following a forensic investigation. The incident is contained. Monroe Health Center is offering 24 months of complimentary Experian identity monitoring to affected individuals.

Monroe County Health Center reported to HHS on 2021-05-28 a Hacking/IT Incident affecting 757 individuals. Breached information located on Network Server. A business associate was the victim of a ransomware attack affecting ePHI including names, DOB, prescriptions, and MRNs.