GoKawiilAesto Health breach exposes data of 9.5 million patients across 29 providers
Aesto LLC, which runs Aesto Health's data migration and archiving service for healthcare providers, revealed that an unauthorized actor accessed its AWS infrastructure between December 2 and 18, 2025. The breach, confirmed internally on May 26 after forensic review, exposed sensitive records for over 9.5 million people including Social Security numbers, driver's license numbers, and medical information tied to 29 healthcare clients such as VillageMD and Together Women's Health.
GoKawiil's interpretation of the reporting above, not reported fact.
The delay between the December intrusion and public disclosure in June, followed by individual notifications only in August, highlights how long sensitive medical and financial data can remain exposed before patients learn their information is at risk. Because Aesto serves as a data intermediary for dozens of healthcare organizations during system transitions, a single breach cascades across many providers' patient populations at once, amplifying the scale of harm from one point of failure.
- Breach affected 9,540,683 individuals, including Social Security and driver's license numbers.
- Intrusion occurred in December 2025 but wasn't confirmed until May 2026 and disclosed to patients in August.
- 29 healthcare providers, including VillageMD and Marathon Health, were indirectly impacted via Aesto's systems.
Yubico YubiKey 5 NFC Security Key — When breaches like this one dump personal data into the wild, stolen passwords become the next attack vector — a hardware security key shuts that down. The YubiKey 5 NFC plugs into USB-A or taps NFC-enabled phones to add phishing-resistant two-factor authentication to accounts like email, banking portals and patient logins.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-01
Published there as: “Aesto Health says data breach affects over 9.5 million patients”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.