Everside Health Data Breach – Investigated by Federman & Sherwood
August 4, 2026 – Federman & Sherwood, a national consumer protection law firm, is investigating the Everside Health data breach following a cybersecurity incident that may have compromised sensitive personal and protected health information.
According to the consumer notice, Aesto, LLC, a healthcare data migration and archiving service provider for Everside, experienced a network security incident affecting a limited portion of its Amazon Web Services infrastructure. Aesto became aware of the incident on or about December 18, 2025, and an investigation determined that an unauthorized actor may have accessed or acquired protected health information stored on Aesto’s network between December 2, 2025, and December 18, 2025. Everside was notified of the incident on June 26, 2026.
According to the notice, the information potentially affected includes an individual’s full name together with additional personal or protected health information that varies by recipient. Aesto states that it has no evidence that the information has been misused. As a precaution, affected individuals are being offered 12 or 24 months of complimentary Privacy Solutions ID through Epiq, which includes credit monitoring, dark web monitoring, identity restoration services, and identity theft protection.
Federman & Sherwood is investigating whether Everside and its third-party vendor implemented reasonable cybersecurity safeguards to protect patients’ sensitive information and whether additional security measures could have prevented this incident.
Healthcare providers and their business associates maintain highly sensitive patient records, including protected health information and personally identifiable information. Unauthorized access to these records may increase the risk of identity theft, medical identity theft, insurance fraud, and other privacy-related harms.
Individuals who received a notification regarding the Everside data breach are encouraged to enroll in the complimentary identity protection services, monitor healthcare records, explanation of benefits statements, financial accounts, and credit reports for suspicious activity.
The potentially compromised information may include:
- Names
- Social Security numbers
- Medical information
- Health insurance information
- Other sensitive information
What is Everside Health?
Everside Health is a direct primary care provider that partners with employers, unions, and organizations to offer on-site, near-site, and virtual medical clinics.
Individuals affected by the Everside data breach may have legal rights and are encouraged to contact Federman & Sherwood to learn more about their options.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com