Village Practice Management: 25k+ Individuals Affected

Village Practice Management Co. LLC, the management entity behind VillageMD and Village Medical, disclosed a data breach linked to a security incident at its vendor, Aesto LLC. Aesto provides healthcare data migration and archiving services for healthcare providers.

On or about Dec. 18, 2025, Aesto experienced a network security incident that impacted a limited portion of its Amazon Web Services infrastructure. Upon discovering the issue, Aesto launched an investigation, working closely with external cybersecurity professionals experienced in handling these types of incidents.

The investigation included an extensive forensic review and manual document review. On May 26, 2026, more than five months after the incident was first detected, Aesto confirmed that a limited amount of protected health information pertaining to patient care and stored on its network may have been accessed or acquired by an unauthorized actor. The period of unauthorized access occurred between on or about Dec. 2, 2025, and Dec. 18, 2025.

Aesto then notified Village Practice Management of the incident on June 26, 2026. Village Practice Management is a covered healthcare entity whose patient data was stored on Aesto's systems for data migration and archiving purposes.

The types of information potentially exposed included full names, Social Security numbers, dates of birth and medical information.

The incident has so far impacted 25,022 Texas residents and 36 Massachusetts residents.

Village Practice Management's response to the breach

Affected individuals are being offered a complimentary membership to Epiq Privacy Solutions ID. To enroll, affected individuals can visit Epiq Privacy Solutions ID, click "Activate Account" and enter the activation code included in their notification letter. The enrollment deadline and coverage length are specified in each person's letter.

A dedicated toll-free response line has been set up at 833-918-8060 for questions about the incident. The line is staffed with professionals familiar with this incident and is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.

For questions specifically about credit monitoring enrollment, individuals can call 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. Eastern Time.