Report a Violation

Thank you for your report. Our team will review and follow up.

Date of Breach Date of Breach
12/02/2025 - 12/18/2025
Allegation Allegation
Data Breach
Institution Type Institution Type
Healthcare
Number Impacted Number Impacted
107,000+
What Happened?

What Is This About?

If you received a letter or email about a data breach from Village Practice Management Company, LLC d/b/a VillageMD, or if you are a current or former VillageMD patient who received a breach notice from Aesto Health, your sensitive personal information or protected health information may have been compromised in a recent data breach. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

What Happened?

On or about December 18, 2025, Aesto, LLC d/b/a Aesto Health, a company that provides healthcare data migration and archiving services for clients including VillageMD, experienced a network security incident affecting a portion of its Amazon Web Services infrastructure. Upon detection, Aesto Health contained the incident and commenced a thorough investigation with the assistance of cybersecurity experts. The investigation confirmed, on May 26, 2026, that between about December 2, 2025, and December 18, 2025, certain protected health information belonging to patients of various Aesto Health clients was accessed and/or acquired by an unauthorized actor. VillageMD patient information was potentially compromised.

On July 31, 2026, VillageMD reported a data breach to the Massachusetts Office of Consumer Affairs and with its report filed a sample notice letter from Aesto Health about the breach. On August 4, 2026, VillageMD reported a data breach to the Texas Attorney General, indicating that over 25k Texans are affected.

Persons affected by the breach will be notified via letter or email from either or both of VillageMD and Aesto Health.

What Happened?

What Information Was Impacted?

According to VillageMD’s public notice and filings, the following categories of information may have been compromised:

  • Name;
  • Date of birth;
  • Social Security number; and
  • Medical information.

What Happened?

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.

About

VillageMD

Headquartered in Chicago, Illinois, VillageMD is a healthcare company operating primary care practices and managing a network of providers across the United States.

About

Levi & Korsinsky

Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against large corporations. The firm is a 100% contingency firm – we don't get paid unless you get paid! Attorney Advertising. Prior results do not guarantee similar outcomes.  

UNDER THE RULES OF CERTAIN JURISDICTIONS, THIS WEBSITE MAY CONSTITUTE ATTORNEY ADVERTISING.

  • Step

    Preliminary Form

  • Step

    Review & Validation

  • Step

    Declaration & Retainer

  • Step

    Follow-up Form

Get Started

Thank You

We’ve got your info! We’re reviewing it now to check if you’re eligible.

Verification in Process

Almost Done

We’ve started your claim. Help us move faster and make your case even stronger by answering a few quick questions.

Follow-up Details Process

Sorry,

It looks like you do not qualify for this case. Please be sure to check our other featured cases to see if you qualify for another claim.

All Set!

You’re all done for now. Our team is reviewing your case and will be in touch soon.
Sit back and relax — we’ve got it from here.

Sorry,

It looks like you do not qualify for this case. Please be sure to check our other featured cases to see if you qualify for another claim.

Loader
Please do not close the window or refresh the page while your submission is being processed.