Find notable cyber news and cases, enriched with sources, timelines, and signals.

Aesto Health patient data breach

Data Leak
First reported
Last updated
Happening score
H score 73
1 unique sources, 1 articles

Summary

Hide ▲

Aesto Health disclosed a data breach affecting 9,540,683 individuals, creating a major identity-theft and medical-fraud risk from exposed patient records. The intrusion reached a limited portion of AWS infrastructure in December 2025 and was confirmed internally on May 26, 2026. The exposed data included names, dates of birth, medical information, financial account numbers, government IDs, and Social Security numbers.

Related Happenings

Aesto LLC operating as Aesto Health hit by network compromise

Incident
H score68 First: 01.09.2026 22:28 Last: 01.09.2026 22:28 Sources 1

How related: the company first informed the public of the attack on June 24 via a notification on its website, stating that “a limited portion” of its Amazon Web Services infrastructure had been compromised.

About this happening: Aesto Health disclosed a breach of a limited portion of its Amazon Web Services infrastructure, exposing protected health information tied to 9,540,683 people. The int...

MCBS data leak claimed by PEAR ransomware group

Data Leak
H score67 First: 27.07.2026 07:51 Last: 27.07.2026 07:51 Sources 1

About this happening: A PEAR ransomware group leak made allegedly stolen MCBS files available for download, exposing personal, financial, HR, patient, payment, and email data. The leak is t...

New York City Health and Hospitals Corporation hit by cyberattack

Incident
H score59 First: 18.05.2026 15:58 Last: 18.05.2026 15:58 Sources 1

About this happening: The New York City Health and Hospitals Corporation disclosed a data breach that exposed sensitive records and affected 1.8 million individuals. Investigators found t...

Cookeville Regional Medical Center patient records leak

Data Leak
H score56 First: 16.04.2026 18:01 Last: 16.04.2026 18:01 Sources 1

About this happening: Cookeville Regional Medical Center disclosed a data leak affecting 337,917 patients, exposing personal and medical records and raising identity-theft risk. Files were...

Timeline

  1. 01.09.2026 22:28 1 articles · 1h ago

    Aesto Health confirms unauthorized access to patient PHI

    Technical Analysis Update

    After an extensive forensic investigation and manual document review, Aesto Health confirmed that protected health information belonging to patients of various Covered Entity clients stored within Aesto’s network may have been accessed and/or acquired by an unauthorized actor during a December 2025 intrusion window.

    Show sources
  2. 01.09.2026 22:28 1 articles · 1h ago

    Aesto Health publicly discloses a limited AWS compromise

    Initial Disclosure

    Aesto Health first informed the public that a limited portion of its Amazon Web Services infrastructure had been compromised, marking the company’s initial public notice of the security incident.

    Show sources
  3. 01.09.2026 22:28 1 articles · 1h ago

    Aesto Health begins notifying impacted individuals and offers Experian monitoring

    Victim Impact Update

    Aesto Health began contacting impacted individuals about the data breach and provided instructions to enroll in a 24-month identity theft protection and credit monitoring service through Experian.

    Show sources
  4. 01.09.2026 22:28 2 articles · 1h ago

    Aesto Health reports 9,540,683 affected in HHS breach filing

    Victim Impact Update

    Aesto Health reported that the breach affects 9,540,683 individuals, and the incident indirectly impacts 29 healthcare providers including VillageMD, Everside Health, Marana Health, and Together Women’s Health. The exposed information included full names, dates of birth, medical information, driver’s license numbers, financial account numbers, health insurance information, individual taxpayer identification numbers, other government identification numbers, and Social Security numbers.

    Show sources