Advanced Women's Care Data Breach Exposes Patient Information

Valley Perinatal Services LLC, doing business as Advanced Women's Care, disclosed a data breach that originated at a third-party vendor called Aesto LLC, also known as Aesto Health.

Upon detecting the unauthorized activity, Aesto contained the incident and launched an investigation with the help of third-party cybersecurity experts. After an extensive forensic investigation and manual document review, Aesto confirmed on May 26, 2026, that between on or about Dec. 2, 2025, and Dec. 18, 2025, certain data stored on its network was copied by an unauthorized actor.

The incident was contained to Aesto's systems and did not directly affect the systems of Advanced Women's Care or other healthcare clients, according to correspondence from Aesto's legal counsel.

On June 26, 2026, Aesto notified Advanced Women's Care that certain patient data belonging to its patients was among the information involved. Advanced Women's Care then began reviewing the impacted data.

On July 1, 2026, Advanced Women's Care determined that the names, medical record numbers and Social Security numbers were included in the affected data.

The types of personal information exposed in the broader incident varied by individual. According to Aesto's notice, the information included full names, dates of birth, Social Security numbers, medical record numbers, medical information, driver's license numbers, financial account numbers, health insurance information, individual taxpayer identification numbers and other government identification numbers.

The breach was reported to attorneys general in New Hampshire and Vermont on Aug. 20, 2026. Aesto also posted a notice of the incident on its website.

Aesto began mailing notification letters to affected individuals on or about Aug. 21, 2026.

Advanced Women's Care's response to the breach

Advanced Women's Care is offering affected individuals 12 months of free single-bureau credit monitoring, credit report and credit score services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation.

To enroll, affected individuals can visit the Cyberscout activation page and enter the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

A dedicated toll-free response line has been set up at 833-918-8060 for questions about the incident. The line is available Monday through Friday, 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. Callers should be prepared to provide the engagement number B167683.