HealthFirst Bluegrass Data Breach: Edelson Lechtzin LLP Investigates Exposure of Social Security Numbers and Health Records

National class action firm offers free case evaluations to patients affected by the HealthFirst Bluegrass breach tied to vendor Aesto Health

LEXINGTON, Ky., Sept. 01, 2026 (GLOBE NEWSWIRE) -- Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from a data breach affecting HealthFirst Bluegrass. The breach traces to a security incident at Aesto Health, a data migration and archiving vendor, and exposed patients’ Social Security numbers and health records. Affected patients may be entitled to compensation, and the firm is offering free, confidential case evaluations.

What Happened

HealthFirst Bluegrass, a multispecialty healthcare system serving the Lexington, Kentucky area, has disclosed a breach linked to Aesto Health. According to notices, a network security issue affected Aesto Health’s Amazon Web Services infrastructure between December 2 and 18, 2025, exposing information about individuals connected to its clients. HealthFirst Bluegrass reported the breach to the Vermont Attorney General on or about August 27, 2026.

Information Exposed

The breach may have compromised:

• Social Security numbers
• Names
• Health records
  

The combination of Social Security numbers and health records raises the risk of both financial identity theft and medical identity theft.

Who May Be Affected

Any current or former patient who receives a breach notification from HealthFirst Bluegrass may face a heightened, long-term risk of identity theft and fraud. The notification letter is the most reliable confirmation that your information was involved.

What Affected Individuals Should Do

• Place a credit freeze with all three bureaus — Equifax, Experian, and TransUnion. It is free and takes minutes.
• Set up fraud alerts and monitor your credit reports and account statements.
• Review medical bills and insurance statements for services you did not receive.
• Watch for phishing — breach notices are a common disguise. Do not click links in unexpected messages.
• Preserve any letters or emails you receive about the breach.
  

Free Case Evaluation

Edelson Lechtzin LLP is investigating a potential class action on behalf of patients whose sensitive data was compromised. The firm will evaluate your rights and potential claims at no cost.

To request a free, confidential consultation, click HERE.

Speak with a data privacy attorney: Marc Edelson, Esq., Edelson Lechtzin LLP 411 S. State Street, Suite N-300, Newtown, PA 18940 Phone: 844-696-7492 | Email: medelson@edelson-law.com 

About HealthFirst Bluegrass

HealthFirst Bluegrass is a federally qualified health center (FQHC) that provides integrated healthcare to everyone, regardless of insurance or ability to pay.

About Edelson Lechtzin LLP

Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. The firm handles data breach, securities fraud, antitrust, ERISA, wage theft, and consumer fraud matters.

This press release may be considered Attorney Advertising in some jurisdictions.