G.I. Medicine Associates, P.C.

G.I. Medicine Associates, P.C. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-09-18. The reporting organization type is Health Care. 2 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.

Aesto LLC d/b/a Aesto Health, a healthcare data migration and archiving vendor, experienced a network security incident impacting its AWS infrastructure. Unauthorized access occurred between December 2 and December 18, 2025. Aesto detected the issue on December 18, 2025. Forensic investigation confirmed that protected health information, including names, addresses, dates of birth, medical record numbers, and Social Security numbers, may have been accessed or acquired. G.I. Medicine Associates, P.C., a covered entity client, notified approximately 3 New Hampshire residents. Aesto engaged cybersecurity experts, contained the incident, notified the FBI, and offered credit monitoring.

G.I. Medicine Associates, P.C. notified patients of a data breach involving their vendor, Aesto, LLC. Unauthorized access to Aesto's AWS infrastructure occurred between December 2 and December 18, 2025. GIMA was notified on June 26, 2026. Affected data included PHI, names, addresses, phone numbers, dates of birth, medical record numbers, and Social Security numbers. GIMA is offering credit monitoring.