2026 G.I. Medicine Associates — Aesto Health AWS archive vendor breach (patient PHI)
Data compromised
Archived medical records / PHI of GIMA patients stored with Aesto (fields per Aesto/GIMA patient notices)
Technical writeup
Verified GIMA patient notice via Massachusetts AG — Aesto notified GIMA June 26, 2026 of Dec 2025 AWS archive incident affecting GIMA archived medical records. Aesto forensics confirmed possible access/acquisition Dec 2–18, 2025; GIMA received patient list ~July 15, 2026. Part of broader Aesto Health 9.54M HHS incident. GIMA national tally not in sample letter. recordsAffected 0; companyConfirmed true.
Root cause
Third-party Aesto Health AWS archive intrusion Dec 2–18 2025; GIMA network not the intrusion point