Aesto Health Data Breach Notice (Vermont Attorney General)

The filing from Aesto Health, submitted to the Vermont Attorney General on July 31, 2026, states that the personal information of 91 people was exposed. The record lists two categories: Social Security Numbers and health records.

Your Social Security Number cannot be replaced

If you were among the 91 individuals named in this filing, your SSN is now in the hands of unknown parties. Unlike a credit card or password, a Social Security Number is permanent. It cannot be reissued on request the way other credentials can. This single number, paired with your name and date of birth, remains one of the highest-value items for identity thieves, tax fraud, and opening accounts in your name. That risk does not expire.

Health records carry their own lifelong consequences. They can be used for insurance fraud, prescription scams, or blackmail. Medical details are intimate and difficult to dispute once they leave the controlled environment of a healthcare provider. The combination of an SSN and health records creates a profile that is especially useful to criminals because it ties financial identity directly to personal medical history.

What the numbers tell us

This incident affected 91 people. The filing does not state when the incident occurred, only that Aesto Health submitted the notification on July 31, 2026. Because no incident date is given, there is no reliable way to calculate how long the information may have been accessible. The record is silent on root cause, encryption status, and how access was obtained. Those details remain undisclosed.

No passwords were exposed. The filing lists only Social Security Numbers and health records. This means the breach does not put any Aesto Health account credentials at risk. You do not need to change a password for this specific incident.

How to determine whether this concerns you

Aesto Health is required to notify affected individuals directly, usually by mail. If you received a letter from them, your information was included. Absence of a letter usually means you were not in the affected group of 91. However, letters go to last known addresses and can be delayed or lost. If you have moved in recent years or have any relationship with Aesto Health as a patient, contact them directly to confirm whether your records were part of this filing.

The permanent nature of these records

Health records and Social Security Numbers do not lose their value over time. A stolen SSN can be used years later to file fraudulent tax returns, apply for government benefits, or open lines of credit. Health information can be leveraged to impersonate you when dealing with insurers or pharmacies. These are not temporary exposures. The people whose records were included face an open-ended risk that requires ongoing vigilance rather than a one-time fix.

What this exposure enables

With an SSN, criminals can attempt synthetic identity fraud or target existing government benefits. Health records can support fraudulent medical claims or be sold on underground markets where detailed patient histories command a premium. The filing does not indicate that every person had both categories exposed, only that the incident involved these types of data. Your own notification letter will specify exactly what applied to you.

The small number of people affected — 91 — does not reduce the seriousness for those who are included. Each individual record carries the full weight of lifelong identifiers and sensitive medical details.

Practical steps that address this specific exposure

• Place a fraud alert or credit freeze with the three major credit bureaus immediately. This is the most effective way to stop new accounts from being opened in your name using the exposed SSN.
• Review every Explanation of Benefits statement from your health insurer. Look for services you did not receive. Report any suspicious claims promptly to prevent insurance fraud tied to your health records.
• Request your annual free credit reports and check them for unfamiliar accounts or inquiries. Continue monitoring quarterly even after the initial review.
• File your taxes early each year. This reduces the window in which someone can file a fraudulent return using your SSN.
• Contact Aesto Health directly if you have not received a letter but believe you may have been affected. Confirm your status and ask what specific safeguards they have put in place for the exposed records.

The record establishes that 91 people had their Social Security Numbers and health records exposed in an incident reported on July 31, 2026. For those notified, the exposure is permanent and demands continued attention to financial and medical accounts. The letter you did or did not receive remains the clearest indicator of whether this filing applies to you.