More than 9.5 million patients affected by Aesto Health breach — names, SSNs, financial details, health records…

https://cdn.mos.cms.futurecdn.net/9DcUT2RtbvGV8dbUy5P8MA-2560-80.jpg
  • Aesto Health reported a December 2025 cyberattack breaching AWS infrastructure, affecting 9.5M patients
  • Stolen data includes PII, SSNs, medical histories, billing, and insurance information across 20+ clients
  • No dark web leaks confirmed; credit monitoring offered, marking 2nd‑largest healthcare breach of 2026

American healthcare technology company Aesto Health suffered the “second-largest confirmed healthcare data breach” of the year so far, having lost data on more than 9.5 million patients.

In mid-December last year, the company suffered a cyberattack. Now, more than half a year later, it reported the incident to the HHS’ Office for Civil Rights, detailing what was lost, from whom, and what the extent of the incident is.

Aesto Health is an Alabama-based healthcare technology business, whose core service is helping other healthcare firms manage medical data, change electronic health record systems, and similar. As per its announcement, the attack affected parts of its Amazon Web Services(AWS) infrastructure,...

Copyright of this story solely belongs to techradar.com. To see the full text click HERE

Read more