Aesto
Disclosed Jul 31, 20268 weeks ago9,540,683 affectedConfirmed
What is known
| People affected | 9,540,683 (as reported to HHS) |
|---|---|
| Disclosed | Jul 31, 2026 |
| Discovered | Dec 18, 2025 |
| Happened | Dec 2, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Aestoatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Aestojustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Aesto (Business Associate, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Jul 31 | 9,540,683 |
| Washington AGresidents of WA | Aug 4 | 37,253 |
| Oregon DOJresidents of OR | Aug 5 | 1 |
| Oregon DOJresidents of OR | Aug 5 | 730 |
Other breaches at Aesto
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed May 20, 2022May 20, 20224 years agoHacking | May 20, 20224 years ago | Hacking | Healthcare | Confirmed | 17K |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 9540683 · backfill source
- 2026-09-25 · disclosed: 2026-08-04 to 2026-07-31 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.