A data breach at Aesto Health, a U.S. healthcare technology company, exposed personal and health information of over 9.5 million individuals after attackers accessed its Amazon Web Services (AWS) infrastructure. The incident was confirmed on May 26, 2026, following discovery on December 18, 2025, and affected data could include names, birth dates, medical records, and financial information.
Aesto Health reported no evidence of identity theft or fraud, initiated an investigation with cybersecurity experts, and began notifying affected clients on June 26, 2026. The company has since implemented security measures and established a helpline for inquiries.