Healthcare Firm Breach Exposes 9,540,683 Patient Records – Names, Social Security Numbers, Medical Data and More at Risk
A healthcare technology provider is alerting more than 9.5 million individuals after unauthorized access exposed their personal and medical data.
Aesto says the incident occurred through its Amazon Web Services infrastructure between December 2nd and December 18th, 2025.
A separate review confirmed the breach affected 9,540,683 people across 29 organizations.
The firm discovered the unauthorized activity on December 18th, 2025, but did not confirm the scope until May 26, 2026, after a forensic investigation.
“After an extensive forensic investigation and manual document review, on May 26, 2026, we confirmed that between on or about December 2, 2025, and December 18, 2025, certain protected health information belonging to patients of various Covered Entity clients stored within Aesto’s network may have been accessed and/or acquired by an unauthorized actor. The information included full names, dates of birth, medical information, driver’s license numbers, financial account numbers only, health insurance information, individual taxpayer identification numbers, other government identification numbers, and Social Security numbers. The elements of information varied per individual, and Social Security numbers were also potentially involved for a limited number of individuals.”
Aesto Health posted a public notice and began notifying clients on June 26th, 2026, with individual mailings starting August 21st.
The company is offering two years of credit monitoring and identity theft protection through Experian.
Aesto Health states in its official notice that no misuse occurred.
“We have no evidence that your medical information involved in this incident was or will be used for any unintended purposes.”
No threat group has claimed responsibility for the attack.
Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
The post Healthcare Firm Breach Exposes 9,540,683 Patient Records – Names, Social Security Numbers, Medical Data and More at Risk appeared first on The Daily Hodl.
