Quincy Valley Medical Center notifies patients of Aesto breach

Aesto, a healthcare data migration and archiving provider, detected unauthorized activity in a limited portion of its Amazon Web Services environment between December 2 and December 18, 2025. Following containment and an extensive forensic and manual review, the company confirmed on May 26, 2026 that certain protected health information for patients of multiple covered-entity clients may have been accessed or acquired, including names, dates of birth, medical information, driver’s license numbers, financial account numbers, health insurance information, taxpayer and other government ID numbers and limited Social Security numbers; notifications to affected covered entities began June 26, 2026 and Aesto engaged cybersecurity experts and established a dedicated response line.