Settlement Health and Medical
ent_39c91bfc4586bd6bde535f9d
Disclosures
2
State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
17
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Settlement Health and Medical
- Normalized
- settlement health and medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- New Hampshire State AGas victim2026-10-14
Settlement Health and Medical notified the NH Attorney General of a data security incident involving its third-party vendor, Aesto, LLC. Unauthorized access to Aesto's AWS infrastructure occurred between December 2 and December 18, 2025. SHM was notified on June 26, 2026. Two New Hampshire residents were affected, with potential exposure of PHI, SSNs, and medical history. SHM offered 12 months of credit monitoring. The incident is contained.
- Massachusetts State AGas victim2026-10-01
Aesto, LLC, a healthcare data migration and archiving service provider, experienced a cyber incident affecting its AWS infrastructure. Unauthorized access occurred between December 2 and December 18, 2025, and was discovered on December 18, 2025. Protected health information, including names, dates of birth, medical information, driver's license numbers, financial account numbers, health insurance information, ITINs, and Social Security numbers, may have been accessed or acquired. Aesto notified covered entities, including Settlement Health and Medical, on June 26, 2026. The incident has been contained, and Aesto has implemented remediation measures including closing security gaps, deleting impacted Lambda functions, and rotating AWS secrets.