[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fylfRFt9dOOroRkBFCQ9znDMZujv1-pH8bF7X1Hx43IQ":3},{"article":4,"iocs":50},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":32,"category":33,"article_tags":37},"eaafae61-b0d4-43e7-8cf0-96345d704ca2","Aesto Health says data breach affects over 9.5 million patients","aesto-health-says-data-breach-affects-over-9-5-million-patients-c0d143","Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals. [...]","Aesto Health, a healthcare software provider, has disclosed a data breach impacting over 9.5 million individuals. The incident, which occurred between December 2025 and May 2026, involved unauthorized access to sensitive patient data including names, dates of birth, medical information, and Social Security numbers. The breach indirectly affects 29 healthcare providers and impacted individuals are being offered identity theft protection services.","Aesto Health data breach exposes personal and health information of over 9.5 million patients.","Aesto Health says data breach affects over 9.5 million patients By Bill Toulas September 1, 2026 03:28 PM 0 Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals. The private technology company provides software-as-a-service solutions that help healthcare organizations migrate, archive, and access patient data when replacing electronic health record systems or acquiring medical practices. The company first informed the public of the attack on June 24 via a notification on its website, stating that “a limited portion” of its Amazon Web Services infrastructure had been compromised. However, the intrusion occurred in December 2025 and was confirmed internally on May 26, following a forensic investigation by external specialists. “After an extensive forensic investigation and manual document review, on May 26, 2026, we confirmed that between on or about December 2, 2025, and December 18, 2025, certain protected health information belonging to patients of various Covered Entity clients stored within Aesto’s network may have been accessed and\u002For acquired by an unauthorized actor,” reads the statement. In a report to the U.S. Department of Health and Human Services, Aesto Health said that the data breach affects 9,540,683 individuals. “The information included full names, dates of birth, medical information, driver’s license numbers, financial account numbers only, health insurance information, individual taxpayer identification numbers, other government identification numbers, and Social Security numbers.” HIPAA Journal says that the incident indirectly impacts 29 healthcare providers, including VillageMD, Everside Health (Marathon Health), Marana Health, and Together Women’s Health. On August 21, the company started to inform impacted individuals of the data breach, providing details about the incident and instructions on how to enroll in a 24-month identity theft protection and credit monitoring service through Experian. The Aesto Health data breach follows a series of similar incidents at other healthtech software companies, including iRhythm, Xolis, Medronic, MCBS, Health-ISAC, Unlimited Technology Systems, CareCloud, Nutex Health, and McKesson. At the time of writing, no threat groups have publicly claimed the Aesto Health attack. Once attackers have valid credentials, only 37% of their actions are blocked Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments. Get the report Related Articles: McKesson discloses breach after ShinyHunters claims patient data theftHospital operator Nutex Health says data stolen in cyberattackHealthtech firm CareCloud data breach impacts 3.7 million patientsNovocure data breach affects more than 1,400 cancer patientsLACMA data breach last year exposed social security and medical data","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Faesto-health-says-data-breach-affects-over-95-million-patients\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F01\u002F03\u002Fhealthcare.jpg","2026-09-01T19:28:17+00:00","2026-09-01T20:00:27.843787+00:00",8,[18,21,24,26,28,30],{"name":19,"type":20},"Aesto Health","vendor",{"name":22,"type":23},"Amazon Web Services","product",{"name":25,"type":20},"Experian",{"name":27,"type":20},"VillageMD",{"name":29,"type":20},"Everside Health",{"name":31,"type":20},"Marathon Health","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",[]]