Aesto

Disclosed Jul 31, 20269,540,683 affectedConfirmed

What is known

People affected	9,540,683 (as reported to HHS)
Disclosed	Jul 31, 2026
Discovered	Dec 18, 2025
Happened	Dec 2, 2025
Attack	Hacking
Data exposed	NamesHealthSocial Security numbersGovernment IDsInsuranceDates of birthAddresses
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Aesto

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Aesto

Official noticeocrportal.hhs.gov

HHS OCR breach report: Aesto (Business Associate, AL)

Official noticeago.vermont.gov

Vermont Attorney General breach report: Aesto

Official noticeoag.ca.gov

California Attorney General breach notice: Aesto

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005482: Aesto

Notices filed

TotalJul 31

HHS OCR9,540,683 people

Residents of WAAug 4

Washington AG37,253 people

Residents of VTSep 25

Vermont AG27 people

Residents of CAOct 30

California AGCount not stated

Residents of VTOct 30

Vermont AG318 people

Residents of TXNov 3

Texas AG171,357 people

Other breaches at Aesto

Hacking breachHacking exposed names and health records. Reported to the HHS archive.17K affectedHealthcareUSMay 20, 2022

History of this record

data_types2026-11-04

["names","health","ssn","government-id"] to ["names","health","ssn","government-id","insurance","dob","addresses"]by dailySource

data_types2026-11-03

["names","health","ssn"] to ["names","health","ssn","government-id"]by dailySource

source2026-11-03

empty to https://oag.ca.gov/privacy/databreach/list?field_sb24_org_name_value=Aestoby dailySource

data_types2026-09-27

["names","health"] to ["names","health","ssn"]by dailySource

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 9540683by backfillSource

disclosed2026-09-25

2026-08-04 to 2026-07-31by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Aesto