Marana Health Center reported that a security incident occurred in Aesto LLC’s environment, a third-party healthcare data migration and archiving vendor. The unauthorized-access period was approximately December 2 through December 18, 2025, with the incident occurring on or about December 18. Aesto confirmed on May 26, 2026, that Marana patient information was affected, notified Marana Health Center on or around June 26, 2026, and Marana began mailing notification letters on September 23, 2026. The notice was filed with the New Hampshire Attorney General’s Office.
The information potentially affected varied by individual and may have included full names, dates of birth, Social Security numbers, and medical record numbers. Fifteen New Hampshire residents were identified as affected, but the total number of Marana Health Center patients affected has not been publicly disclosed. The broader number of patients affected across Aesto’s healthcare clients also remains undisclosed. Further details may emerge as additional notices are filed.