Catalyst Physician Group
ent_a9ade6236442570cba3fcb98
Disclosures
4
State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
248,144
nationwide · State AG TX
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Catalyst Physician Group
- Normalized
- catalyst physician— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- New Hampshire State AGas victim2026-09-16
Catalyst Physician Group notified the NH Attorney General of a data breach involving its third-party vendor, Aesto, LLC. An unauthorized actor accessed patient data stored on Aesto's AWS infrastructure between December 2 and December 18, 2025. Catalyst became aware of the incident on June 26, 2026, when Aesto notified them. The breach affected 13 New Hampshire residents, exposing names, addresses, Social Security numbers, medical record numbers, and dates of birth. Notification letters were mailed on September 11, 2026, offering credit monitoring and identity theft protection.
- Texas State AGas victim2026-09-15
Catalyst Physician Group based in Plano, Texas, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-18 and reported on 2026-09-15. 242,121 Texas residents were affected. 248,144 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.
- California State AGas victim2026-09-11
Catalyst Physician Group notified patients of a data breach involving protected health information (PHI) stored by third-party vendor Aesto, LLC. An unauthorized actor accessed data between December 2 and December 18, 2025. Aesto discovered the incident on December 18, 2025. Affected data includes full names and other PHI. The company engaged forensic investigators and is offering identity theft protection services.
- Massachusetts State AGas victim2026-09-01
Catalyst Physician Group notified patients of a data breach involving their protected health information (PHI). The incident occurred at Aesto, LLC, a third-party vendor providing healthcare data migration and archiving services. An unauthorized actor accessed PHI stored in Aesto's AWS infrastructure between December 2 and December 18, 2025. Aesto discovered the incident on December 18, 2025, and confirmed the scope of the breach on May 26, 2026, after forensic investigation. Affected data includes full names and other PHI. Catalyst Physician Group is offering complimentary identity theft protection services to affected individuals.