Shenandoah Valley Medical System, Inc. (doing business as Shenandoah Community Health) disclosed a data security incident that occurred at Aesto Health, a healthcare data vendor, between December 2 and December 18, 2025. The company notified patients on or around August 11, 2026, about the incident. The compromised data included names, dates of birth, medical information, driver’s license numbers, financial account numbers, health insurance information, taxpayer identification numbers, government identification numbers, and Social Security numbers. The number of affected individuals for Shenandoah Valley Medical System has not been publicly disclosed. Details surrounding the specific impact on Shenandoah Valley Medical System patients, including the exact count, continue to emerge. Patients affected by the incident were notified by the organization.