9.5 Million Impacted by Aesto Health Data Breach

Hackers gained unauthorized access to Aesto Health's AWS infrastructure for over two weeks, exfiltrating highly sensitive personal, financial, and medical data on 9.5 million individuals. The 16-day dwell time suggests a failure in both access controls and monitoring, allowing attackers to operate undetected long enough to conduct large-scale data exfiltration. Healthcare organizations are high-value targets precisely because the data they hold — Social Security numbers, health records, insurance details — commands premium prices on criminal markets and causes lasting harm to victims. This breach underscores that cloud infrastructure requires the same rigorous security posture as on-premises systems, including least-privilege access, continuous monitoring, and data minimization practices.