Huge data breach at Aesto Health involving 9.5M individuals

Source: The HIPAA Journal The HIPAA Journal reported earlier this month that a data breach at Aesto Health, a Birmingham, Ala.-based healthcare technology company, has affected several of its healthcare provider clients.

Aesto Health provides secure data migration, legacy data archiving, and electronic health record (EHR) exchanges for medical practices and healthcare enterprises.

A security incident was identified on or around Dec. 18, 2025, involving part of its Amazon Web Services (AWS) infrastructure. Third-party cybersecurity experts were engaged to investigate the incident and confirmed that its AWS environment was accessed by an unauthorized third party.

The data breach has now been reported to the HHS’ Office for Civil Rights as involving the electronic protected health information of more than 9.5 million individuals, which makes it the second-largest confirmed healthcare data breach of the year to date. Full Story