Henry County Hospital

Henry County Hospital based in Napoleon, Ohio, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-26 and reported on 2026-10-28. 960 Texas residents were affected. 63,562 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Date of Birth. Consumers were notified via U.S. Mail.

Henry County Hospital notified the NH Attorney General of a data security incident involving its third-party vendor, Aesto, LLC. Unauthorized access to Aesto's AWS infrastructure occurred between December 2 and December 18, 2025. HCH was notified on June 26, 2026. The incident potentially impacted 17 New Hampshire residents, exposing names, dates of birth, medical record numbers, and Social Security numbers. HCH offered 12 months of credit monitoring.

Aesto, LLC, a healthcare data migration and archiving service provider, experienced a cyber incident affecting its AWS infrastructure. Unauthorized access occurred between December 2 and December 18, 2025, and was discovered on December 18, 2025. Protected health information (PHI) of individuals affiliated with Henry County Hospital and other covered entities may have been accessed or acquired. The data included names, dates of birth, medical information, driver's license numbers, financial account numbers, health insurance information, ITINs, and Social Security numbers. Aesto engaged external cybersecurity professionals, secured the network, reset credentials, and deleted impacted Lambda functions. No evidence of misuse was found. Aesto is offering credit monitoring and notification assistance to affected covered entities.

Henry County Hospital reported to HHS on 2023-04-14 a Hacking/IT Incident affecting 3689 individuals. Breached information located on Network Server. A business associate experienced the attack, compromising PHI including names, SSNs, and medical data.