In August 2026, Gila Health Resources experienced a data breach that originated with its third-party vendor, Aesto Health, a data migration and archiving company. The incident was reported via state Attorney General filings, with an Illinois notice date of August 5, 2026, and Texas and Vermont reports around August 7, 2026. Gila Health Resources is a multispecialty medical provider with locations in Arizona, New Mexico, Texas, and Colorado.
The breach explicitly confirmed the exposure of Social Security numbers (SSNs). Some reports also mentioned medical information. At least 1,157 Texas residents were affected, as detailed in the Texas notice. The full, company-wide count of affected individuals has not been publicly disclosed by Gila Health Resources.
Attorneys are investigating the incident for a potential class action lawsuit. Details regarding the full scope of the breach and potential further notifications may emerge as investigations continue.