A data breach at Aesto Health has resulted in the theft of personal and health information from over 9.5 million individuals. Discovered on December 18, 2025, the breach involved the company’s AWS infrastructure, with unauthorized access occurring from December 2 to 18. The incident compromised sensitive data including names, Social Security numbers, driver’s license numbers, medical information, and financial account details.
Aesto Health reported the breach to the US Department of Health and Human Services, which added the company to its breach portal. The incident has impacted at least two dozen healthcare provider clients across multiple states.