Ocracoke Health Center, Inc.
ent_b80bda01ce01155940750c5e
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
41
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Ocracoke Health Center, Inc.
- Normalized
- ocracoke health center— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- Vermont State AGas victim2026-09-16
Ocracoke Health Center, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-09-16. The reporting organization type is Health Care. 29 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.
- New Hampshire State AGas victim2026-09-16
Ocracoke Health Center, Inc. notified the NH Attorney General of a data security incident at its business associate, Aesto, LLC. An unauthorized actor accessed protected health information (including SSNs, diagnoses, and contact info) of 4 New Hampshire residents between Dec 2 and Dec 18, 2025. Aesto detected the incident on Dec 18, 2025, and contained it. Forensic investigation confirmed access/exfiltration. Residents were notified on Sept 16, 2026, and offered identity monitoring. Aesto remediated by closing security gaps, rotating credentials, and deleting impacted AWS Lambda functions.
- Massachusetts State AGas victim2026-09-01
Ocracoke Health Center notified patients that its vendor, Aesto LLC, experienced a network security incident affecting AWS infrastructure. Unauthorized access to protected health information (PHI) occurred between December 2 and December 18, 2025. Aesto confirmed the breach on May 26, 2026, after forensic investigation. Affected data includes full names and other PHI. Complimentary identity monitoring is offered.