Everside Health, a healthcare provider, experienced a data breach in late 2025 involving its third-party vendor, Aesto, LLC. The incident occurred due to a network security event at Aesto, LLC, affecting part of its AWS infrastructure. Everside Health filed breach notifications with state attorneys general starting July 31, 2026.
The exposed data includes full names, dates of birth, addresses, Social Security numbers, medical information, and health records. While the total number of affected individuals nationwide has not been publicly disclosed, at least 80,622 South Carolina residents, 22,210 Texas residents, and 1,562 Massachusetts residents were impacted. The California Attorney General's site also shows a sample notice filed by Everside Health.
Publicly available information indicates that law firms are investigating potential lawsuits related to this incident. Consumers were notified starting July 31, 2026. Details may emerge as investigations progress and additional notifications are sent.