Skip to content
Lexington Hospital Corp. Data Breach Affects 67,000 Due to Vendor Incident

Lexington Hospital Corp. Data Breach Affects 67,000 Due to Vendor Incident

First seen 19 Oct 2026, 20:21 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 20:51 UTC
  • •Data breach affects approximately 67,000 individuals connected to Lexington Hospital Corp.
  • •Incident linked to third-party vendor Aesto LLC, not a direct attack on hospital systems.
  • •Types of compromised information remain undisclosed, but may include sensitive health data.

Lexington Hospital Corp. disclosed a data breach affecting approximately 67,000 individuals, linked to Aesto LLC, a third-party vendor. The breach was reported to the U.S. Department of Health and Human Services on September 8, 2026, and involved unauthorized access to personal and protected health information stored on Aesto's network between December 2 and December 18, 2025. The specific types of compromised information have not been disclosed but may include names, health records, and medical information. The breach did not involve a direct attack on Lexington Hospital's internal systems. The hospital is associated with several regional healthcare entities, including Henderson County Community Hospital. A law firm is investigating the breach for potential class action claims.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-12-02 to 2025-12-18
Unauthorized access period
Personal and protected health information on Aesto's network may have been accessed by an unauthorized actor.
Claimdepot
2026-09-08
Breach reported to HHS
Lexington Hospital Corp. disclosed the data breach to the U.S. Department of Health and Human Services.
Teiss

More articles in this cluster (2)

Following this threat?

Track Aesto LLC in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

What types of data were compromised?
The specific types of compromised data have not been disclosed but may include names, health records, and medical information.
Was the hospital's internal system attacked?
No, the breach was linked to a third-party vendor and did not involve a direct attack on Lexington Hospital's internal systems.
What is the current status of the investigation?
A law firm is investigating the breach for potential class action claims, but no further details have been provided.