More than 9.5 million patients affected by Aesto Health breach — names, SSNs, financial details, health records and more stolen
More than two dozen of Aesto's clients affected by the December 2025 cyberincident.
Aesto Health, an Alabama-based healthcare technology firm, reported a significant cyberattack in December 2025 that compromised the data of over 9.5 million patients. The breach, which affected multiple clients' Amazon Web Services (AWS) infrastructure, exposed sensitive personal information such as full names, Social Security numbers, dates of birth, driver's license numbers, financial account numbers, and health insurance details.
While no leaks on the dark web have been confirmed, Aesto Health has offered credit monitoring and identity theft protection to those affected. This incident marks the second-largest healthcare data breach of 2026, following the DentaQuest breach which exposed 15 million records.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
