Aesto Health
Disclosed Jun 24, 20263 months ago9,540,683 affectedConfirmed
Aesto Health AWS breach exposes data of 9,540,683 patients at 29 providers
Healthcare data and billing firm Aesto Health said attackers accessed its AWS infrastructure between December 2 and 18, 2025, exposing SSNs, ID and insurance numbers and medical data. It reported 9,540,683 affected people to HHS across 29 client providers including VillageMD and Everside Health.
What is known
| People affected | 9,540,683 (as reported by the organization) |
|---|---|
| Disclosed | Jun 24, 2026 |
| Discovered | May 26, 2026 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Health, Government IDs, Financial, Insurance, Social Security numbers |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Aesto Health notice of data security incidentaestohealth.com · Official notice | Official notice |
| Aesto Health says data breach affects over 9.5 million patientsbleepingcomputer.com · News | News |
| Vermont Attorney General breach report: Aesto Healthago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 24 | 9,540,683 |
| Vermont AGresidents of VT | Jul 31 | 91 |