Health Access Network, Inc. reported a data security incident to the New Hampshire Attorney General after Aesto, LLC, its business associate for healthcare data migration and archiving, experienced a network security incident. The potential unauthorized-access period was December 2 through December 18, 2025, and Aesto confirmed on May 26, 2026, that some protected health information stored on its network may have been accessed or acquired. The incident involved Aesto’s infrastructure rather than unauthorized access to Health Access Network’s own computer systems.
The information potentially involved full names, Social Security numbers, and medical information. A numerical count of Health Access Network individuals affected has not been disclosed. Health Access Network began mailing notices to affected New Hampshire residents on September 17, 2026. Related class action lawsuits have been filed against Aesto and other healthcare providers, but the consulted litigation source does not identify Health Access Network as a defendant. Further incident details may emerge as notifications and regulatory reporting continue.