Edwards County Medical Center, a critical access hospital in Kinsley, Kansas, notified patients on August 27, 2026, about a data security incident. The breach occurred at Aesto, LLC, a third-party vendor providing healthcare data migration and archiving services, between December 2, 2025, and December 18, 2025. The incident potentially exposed patient data including full names, dates of birth, Individual Taxpayer Identification Numbers, medical information (hospital unit, physician name), and medical record numbers. The specific number of affected individuals from Edwards County Medical Center has not been disclosed. Attorneys are investigating whether affected patients can pursue a class action lawsuit. Details regarding the exact impact or further actions by regulators may emerge as the situation develops.