Feeds.Feedburner Aesto Health Data Breach Exposes 9.5 Million Patients' Information
Article Content
- •9.5 million patients affected by Aesto Health data breach.
- •Compromised data includes Social Security numbers and medical information.
- •Breach discovered on December 18, 2025, and reported to HHS in August 2026.
A data breach at Aesto Health, a healthcare technology company in Birmingham, Alabama, was discovered on December 18, 2025. The breach affected at least 9.5 million patients, with compromised data including names, Social Security numbers, and medical information. The unauthorized access occurred between December 2 and December 18, 2025, involving parts of Aesto's Amazon Web Services infrastructure. Aesto Health engaged cybersecurity experts to investigate and confirmed the breach on May 26, 2026. Notifications to affected healthcare provider clients began on June 26, 2026. The breach is now reported to the HHS’ Office for Civil Rights, marking it as the second-largest healthcare data breach of the year. Aesto has stated there is no evidence of identity theft or financial fraud related to this incident. The company continues to evaluate its security practices to prevent future incidents.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track Aesto Health in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…