Allied Health MSO Holdco, LLC
Incident posture
Linked entities
- Victim
- Allied Health MSO Holdco, LLC
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
Allied Health MSO Holdco, LLC experienced a data breach that originated at its third‑party vendor Aesto, LLC, which provides healthcare data migration and archiving services. The breach exposed individuals’ names and Social Security numbers, prompting the vendor to offer affected persons complimentary credit monitoring and identity theft protection for 24 months, including a $1,000,000 identity theft insurance policy. Edelson Lechtzin LLP is investigating the incident for potential class action claims on behalf of those whose data may have been compromised.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On August 25, 2026, Allied Health MSO Holdco, LLC reported a data breach that had been identified by breach‑monitoring services the following day. The incident was traced to Aesto, LLC, a third‑party vendor that provides healthcare data migration and archiving services to Allied Health. Aesto disclosed that a data security incident had occurred involving personal information it maintained on behalf of Allied Health. The breach was first made public in a press release issued by Edelson Lechtzin LLP on August 27, 2026, which noted that the breach had been reported on or about August 25, 2026.
According to the notice issued to affected individuals, the exposed data consisted of names and Social Security numbers. The release stated that the full scope and cause of the incident had not been publicly detailed at that time. Individuals who receive a data breach notification from either Allied Health MSO Holdco, LLC or Aesto, LLC are considered potentially affected. The compromised information is described as presenting a heightened and long‑term risk of identity theft, fraud, and account takeover.
In response to the breach, Aesto is offering affected individuals complimentary credit monitoring and identity theft protection for 24 months, including a $1,000,000 identity theft insurance policy, through Cyberscout, a TransUnion company. Edelson Lechtzin LLP, a national class action law firm, announced that it is investigating the incident to evaluate potential legal claims on behalf of those whose personal data may have been compromised. The firm indicated that it will provide free, confidential case evaluations to affected individuals. No further technical details about the attack vector, containment measures, or timeline of discovery beyond the initial reporting dates were disclosed in the available source material.
Sources
Sources available to members: 1 source.