BreachCensus

Aesto, LLC

United States of America

Aesto, LLC is an organisation in Vermont. It appears on the HHS OCR breach portal, the Massachusetts Attorney General breach-notification register, the Washington State Attorney General breach-notification register and the Vermont Attorney General breach-notification register with 3 confirmed incidents (4 filings); the most recent notice was filed on September 25, 2026.

Data as of October 5, 2026.

Sources

Confirmed incident

Filed in VT and MA

The same incident was filed separately with 2 jurisdictions within a few days of each other (VT and MA) — shown here as one incident.

Disclosed
September 25, 2026

Timeline

  1. September 23, 2026
    Reported to regulator Regulator

    MA AG breach notification: 8 Massachusetts residents affected

    source
  2. September 25, 2026
    Reported to regulator Regulator

    VT AG breach notification: 27 Vermont residents affected

    source
  3. September 25, 2026
    Reported to regulator Regulator

    MA AG breach notification: 110 Massachusetts residents affected

    source

Litigation

  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
What a Vermont notice means

Governed by 9 V.S.A. §2435. Notification to the Attorney General is required.

Note: the count is Vermont residents.

Vermont breach-notification register ↗

What a Massachusetts notice means

Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.

Note: the count is Massachusetts residents only, not a total.

Massachusetts breach-notification register ↗

Confirmed incident

US-WA — Unauthorized Access/Disclosure

Occurred
December 2, 2025
Disclosed
August 4, 2026

Timeline

  1. August 4, 2026
    Reported to regulator Regulator

    WA AG breach notification: 37,253 Washington residents affected

    source

Litigation

  • Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
What a Washington notice means

Governed by RCW 19.255.010. Notice to the Attorney General is required when a breach affects more than 500 Washington residents.

Note: the count is Washington residents only, not a total.

Washington breach-notification register ↗

Confirmed incident

US-AL — Hacking/IT Incident

Disclosed
July 31, 2026
Records affected
9,540,683

Was I affected? →

Reported with a business associate involved (HHS portal)

Timeline

  1. July 31, 2026
    Reported to regulator Regulator

    HHS OCR breach portal listing: Hacking/IT Incident; Network Server

    source

Related

Disclosed around the same time