{"id":1344,"date":"2026-09-02T14:20:09","date_gmt":"2026-09-02T08:50:09","guid":{"rendered":"https:\/\/www.hexnode.com\/threat-watch\/?p=1344"},"modified":"2026-09-03T17:06:46","modified_gmt":"2026-09-03T11:36:46","slug":"aesto-health-aws-breach-exposes-millions-of-patient-records","status":"publish","type":"post","link":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/","title":{"rendered":"Aesto Health AWS Breach Exposes Millions of Patient Records"},"content":{"rendered":"<p>Aesto Health, a Birmingham, Alabama-based healthcare technology company, has disclosed a healthcare data breach affecting more than 9.5 million individuals \u2014 one of the largest healthcare data exposures reported this year. The company, which provides SaaS solutions that help healthcare organizations migrate, archive, and access patient records during electronic health record (EHR) transitions, confirmed that attackers accessed a limited portion of its Amazon Web Services (AWS) infrastructure. Because Aesto Health stores data on behalf of numerous covered entities, the fallout extends well beyond its own environment, touching healthcare providers such as VillageMD, Everside Health, Marana Health, and Together Women&#8217;s Health.<\/p>\n<p>For enterprise IT and security teams, this incident is a case study in how a single AWS breach at a downstream SaaS vendor can cascade across an entire healthcare ecosystem.<\/p>\n<p><center>    \t\t<!-- button style scb6aaa006dc095ba618bc1777be3a12f2a -->\r\n    \t\t<style>\r\n    \t\t\t.scb6aaa006dc095ba618bc1777be3a12f2a, a.scb6aaa006dc095ba618bc1777be3a12f2a{\r\n    \t\t\t\tcolor: #fff;\r\n    \t\t\t\tbackground-color: ;\r\n    \t\t\t}\r\n    \t\t\t.scb6aaa006dc095ba618bc1777be3a12f2a:hover, a.scb6aaa006dc095ba618bc1777be3a12f2a:hover{\r\n    \t\t\t\t    \t\t\t\tbackground-color: #323232;\r\n    \t\t\t}\r\n    \t\t<\/style>\r\n    \t\t<a href=\"https:\/\/www.hexnode.com\/uem\/\" class=\"ht-shortcodes-button scb6aaa006dc095ba618bc1777be3a12f2a  hn-cta__blogs--inline-button \" id=\"\" style=\"\" >\r\n    \t\tStrengthen Healthcare Data Breach Response with Hexnode<\/a>\r\n    \t\t<\/center><\/p>\n<h2>Healthcare Data Breach Timeline: What Happened and Who Was Affected<\/h2>\n<p>Key facts at a glance:<\/p>\n<ul>\n<li><strong>Timeline:<\/strong> Intrusion occurred between approximately December 2 and December 18, 2025; confirmed internally on May 26, 2026 after forensic investigation; individual notifications began August 21, 2026.<\/li>\n<li><strong>Scale:<\/strong> 9,540,683 individuals affected.<\/li>\n<li><strong>Data exposed:<\/strong> Full names, dates of birth, medical information, driver&#8217;s license numbers, financial account numbers, health insurance information, taxpayer identification numbers, other government IDs, and Social Security numbers.<\/li>\n<li><strong>Downstream impact:<\/strong> Multiple healthcare providers affected, including VillageMD, Everside Health, Marana Health, and Together Women&#8217;s Health.<\/li>\n<li><strong>Regulatory action:<\/strong> Reported to the U.S. Department of Health and Human Services.<\/li>\n<li><strong>Remediation offered:<\/strong> 24 months of identity theft protection and credit monitoring through Experian.<\/li>\n<\/ul>\n<p>This combination of protected health information and financial\/identity data makes affected individuals vulnerable to both medical identity fraud and traditional <a href=\"https:\/\/www.hexnode.com\/blogs\/explained\/what-is-identity-security\/\">identity theft<\/a> \u2014 the months-long gap between confirmation and notification is also worth noting, as it&#8217;s common in large-scale breaches involving multiple downstream clients.<\/p>\n<section id='resource-single'>\n                    <div class='resource-box'>\n                        <div class='resource-box__image-section'>\n                            <div class='resource-box__image-wrap'>\n                                <img decoding=\"async\" src=\"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/cybersecurity-kit.webp?format=webp\" class=\"resource-box__image\" alt=\"cybersecurity-kit\" loading=\"lazy\" srcset=\"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/cybersecurity-kit.webp?format=webp 960w, https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/cybersecurity-kit-300x225.webp?format=webp 300w, https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/cybersecurity-kit-768x576.webp?format=webp 768w, https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/cybersecurity-kit-133x100.webp?format=webp 133w\" sizes=\"auto, (max-width: 960px) 100vw, 960px\" title=\"cybersecurity-kit\" \/>\n                            <\/div>\n                        <\/div>\n                        <div class='resource-box__content-section'>\n                            <h5 class='resource-box__content-subheading'>\n                            Featured Resource\n                            <\/h5>\n                            <h4 class='resource-box__content-heading'>\n                            Cybersecurity kit\n                            <\/h4>\n                            <p class='resource-box__contents'>\n                            Access essential cybersecurity resources to strengthen security, reduce risk, and improve cyber resilience.\r\n\n                            <\/p>\n                            <a class='resource-box__content-link hn-cta__blogs--resource-box' href='https:\/\/www.hexnode.com\/resources\/resource-kits\/cybersecurity-kit\/'>\n                            Download the Resource Kit\n                            <svg xmlns='http:\/\/www.w3.org\/2000\/svg' width='20' height='20' viewBox='0 0 20 20'>\n                            <g id='arrow' transform='translate(-309 -191)' opacity='0'>\n                                <rect id='base' width='20' height='20' transform='translate(309 191)' fill='none'\/>\n                                <path id='arrow-2' data-name='arrow' d='M13.093.5,6.8,6.8.5.5' transform='translate(315 207.594) rotate(-90)' fill='none' stroke='#0549d1' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.2'\/>\n                            <\/g>\n                            <\/svg>\n\n                            <\/a>\n                        <\/div>\n                    <\/div>\n                <\/section>\n<h2>How the AWS Breach Exposed Protected Health Information<\/h2>\n<p>Public reporting confirms a &#8220;limited portion&#8221; of Aesto Health&#8217;s AWS infrastructure was compromised, but several details remain undisclosed:<\/p>\n<ul>\n<li>Initial access vector<\/li>\n<li>Specific AWS services affected<\/li>\n<li>The identity path attackers used to reach sensitive repositories<\/li>\n<\/ul>\n<p>Because the exposed data was tied to healthcare migration and archival workflows, the investigation likely required reviewing:<\/p>\n<ul>\n<li>Cloud access logs<\/li>\n<li>Storage bucket permissions<\/li>\n<li>Database activity<\/li>\n<li>Service account behavior<\/li>\n<li>File-level access patterns<\/li>\n<li>API call history<\/li>\n<\/ul>\n<p>The exposed data spans both identity records and clinical information, suggesting attackers reached repositories where PII and PHI were co-located \u2014 a common architecture in EHR migration and archiving platforms where data from many source systems is consolidated for transfer.<\/p>\n<h2>Preventing the Next Healthcare Data Breach with Hexnode<\/h2>\n<p>Incidents like this highlight why endpoint and identity security can&#8217;t be treated as separate from cloud infrastructure security. The devices administrators and staff use to access cloud and SaaS platforms are often the weakest link \u2014 securing that endpoint layer is a critical first line of defense.<\/p>\n<p><a href=\"https:\/\/www.hexnode.com\/xdr\/\">Hexnode XDR<\/a> can help detect the early warning signs of a compromise like this, including:<\/p>\n<ul>\n<li>Suspicious endpoint activity<\/li>\n<li>Credential theft attempts<\/li>\n<li>Unusual file and process behavior<\/li>\n<li>Post-compromise behavior<\/li>\n<\/ul>\n<p>Hexnode UEM complements this by enforcing:<\/p>\n<ul>\n<li>Device compliance<\/li>\n<li>Timely OS and browser patching<\/li>\n<li><a href=\"https:\/\/www.hexnode.com\/blogs\/explained\/what-is-disk-encryption\/\">Disk encryption<\/a><\/li>\n<li>Consistent security baselines across admin and staff devices<\/li>\n<\/ul>\n<p>Combining identity-aware access controls with managed, compliant endpoints strengthens the endpoint posture that underpins secure cloud and SaaS administration \u2014 precisely the layer where breaches like Aesto Health&#8217;s often originate.<\/p>\n<div class=\"faq-section-wrapper\" itemscope itemtype=\"https:\/\/schema.org\/FAQPage\"><h2 class=\"faq-main-title\">FAQs<\/h2><div class=\"faq-items\"><div class=\"faq-item\" itemprop=\"mainEntity\" itemscope itemtype=\"https:\/\/schema.org\/Question\"><div class=\"faq-item__question\" role=\"button\" tabindex=\"0\" aria-expanded=\"false\"><span itemprop=\"name\">What should I do if my health data was exposed in a breach like this?<\/span>\n            <div class=\"toggle\" aria-hidden=\"true\"><span><\/span><span><\/span><\/div>\n        <\/div> <div class=\"faq-item__content\" itemprop=\"acceptedAnswer\" itemscope itemtype=\"https:\/\/schema.org\/Answer\"><div class=\"faq-item__body\" itemprop=\"text\"><p>Enroll in the credit monitoring or identity theft protection service offered by the breached organization, since these typically cover a defined period at no cost. Review medical bills and insurance statements regularly for unfamiliar charges, which can indicate medical identity fraud. Consider placing a fraud alert or credit freeze with the major credit bureaus for added protection.<\/p>\n<\/div><\/div><\/div> <div class=\"faq-item\" itemprop=\"mainEntity\" itemscope itemtype=\"https:\/\/schema.org\/Question\"><div class=\"faq-item__question\" role=\"button\" tabindex=\"0\" aria-expanded=\"false\"><span itemprop=\"name\">How long do healthcare organizations typically take to detect a data breach?<\/span>\n            <div class=\"toggle\" aria-hidden=\"true\"><span><\/span><span><\/span><\/div>\n        <\/div> <div class=\"faq-item__content\" itemprop=\"acceptedAnswer\" itemscope itemtype=\"https:\/\/schema.org\/Answer\"><div class=\"faq-item__body\" itemprop=\"text\"><p>Detection timelines vary widely, but breaches involving cloud infrastructure can go unnoticed for weeks or months before internal confirmation. In this case, the intrusion began in early December 2025 but wasn&#8217;t confirmed until late May 2026. Extended detection windows are common in incidents that require forensic investigation and manual document review across large datasets.<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n<h3>Key Takeaways for Enterprise Cloud and Healthcare Security<\/h3>\n<p>The Aesto Health breach shows why cloud security, endpoint posture, and identity controls must work together. A compromised credential or misconfigured AWS access path can expose millions of patient records. The impact can also extend across dozens of downstream healthcare organizations.<\/p>\n<p>Healthcare technology providers and their partners should strengthen AWS access controls and actively monitor data movement. They should also enforce least-privilege permissions and maintain incident-response playbooks for large-scale patient-data exposure. When a breach occurs, the impact rarely stays contained within one organization.<\/p>\n<div class=\"signup_box\"><div class=\"signup_wrap_img\"><div class=\"signup-bg\" style=\"background-image:url(https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/Hexnode-MDM-free-trial.jpg?format=webp)\"><\/div><\/div><div class=\"signup_wrap\"><h5>Strengthen Healthcare Data Breach Response<\/h5><p>Secure endpoints, detect suspicious activity, and accelerate breach response with Hexnode UEM and XDR.<\/p><a href=\"https:\/\/www.hexnode.com\/mobile-device-management\/cloud\/signup\/\" class=\"hn-cta__blogs--signup-stripe\" target=\"_blank\"> Start Your Free Trial! <\/a><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Aesto Health, a Birmingham, Alabama-based healthcare technology company, has disclosed a healthcare data breach affecting&#8230;<\/p>\n","protected":false},"author":6,"featured_media":1383,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[14,19],"class_list":["post-1344","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-supply-chain-attack","category-cloud-and-saas","product_category-extended-detection-and-response","tab_group-vulnerabilities"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Aesto Health AWS Breach Exposes Millions of Patient Records<\/title>\n<meta name=\"description\" content=\"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Aesto Health AWS Breach Exposes Millions of Patient Records\" \/>\n<meta property=\"og:description\" content=\"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/\" \/>\n<meta property=\"og:site_name\" content=\"Hexnode Threat Watch\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hexnode\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-02T08:50:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-03T11:36:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1340\" \/>\n\t<meta property=\"og:image:height\" content=\"700\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Lily Anne\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@thehexnode\" \/>\n<meta name=\"twitter:site\" content=\"@thehexnode\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Lily Anne\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/\"},\"author\":{\"name\":\"Lily Anne\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/person\\\/072b33718ec5df7cb7dbb9bae93044fa\"},\"headline\":\"Aesto Health AWS Breach Exposes Millions of Patient Records\",\"datePublished\":\"2026-09-02T08:50:09+00:00\",\"dateModified\":\"2026-09-03T11:36:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/\"},\"wordCount\":831,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp\",\"articleSection\":[\"Supply Chain Attack\",\"Cloud and SaaS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/\",\"name\":\"Aesto Health AWS Breach Exposes Millions of Patient Records\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp\",\"datePublished\":\"2026-09-02T08:50:09+00:00\",\"dateModified\":\"2026-09-03T11:36:46+00:00\",\"description\":\"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp\",\"contentUrl\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp\",\"width\":1340,\"height\":700,\"caption\":\"Aesto Health AWS Breach Exposes Millions of Patient Records\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/aesto-health-aws-breach-exposes-millions-of-patient-records\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Aesto Health AWS Breach Exposes Millions of Patient Records\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#website\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\",\"name\":\"Hexnode Threat Watch\",\"description\":\"Latest cyber threats, smarter enterprise response.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\"},\"alternateName\":\"Threat Watch\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\",\"name\":\"Hexnode\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/hexnode-2.png?format=webp\",\"contentUrl\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/hexnode-2.png?format=webp\",\"width\":100,\"height\":100,\"caption\":\"Hexnode\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Hexnode\\\/\",\"https:\\\/\\\/x.com\\\/thehexnode\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/hexnode\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/person\\\/072b33718ec5df7cb7dbb9bae93044fa\",\"name\":\"Lily Anne\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g\",\"caption\":\"Lily Anne\"},\"description\":\"Content writer at Hexnode. Fueled by good coffee and the occasional cat cuddle, I enjoy crafting content that informs, connects, and resonates. Nothing excites me more than knowing my words have been read, appreciated, and maybe even bookmarked.\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/author\\\/lily-anne\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Aesto Health AWS Breach Exposes Millions of Patient Records","description":"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/","og_locale":"en_US","og_type":"article","og_title":"Aesto Health AWS Breach Exposes Millions of Patient Records","og_description":"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.","og_url":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/","og_site_name":"Hexnode Threat Watch","article_publisher":"https:\/\/www.facebook.com\/Hexnode\/","article_published_time":"2026-09-02T08:50:09+00:00","article_modified_time":"2026-09-03T11:36:46+00:00","og_image":[{"width":1340,"height":700,"url":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp","type":"image\/png"}],"author":"Lily Anne","twitter_card":"summary_large_image","twitter_creator":"@thehexnode","twitter_site":"@thehexnode","twitter_misc":{"Written by":"Lily Anne","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#article","isPartOf":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/"},"author":{"name":"Lily Anne","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/person\/072b33718ec5df7cb7dbb9bae93044fa"},"headline":"Aesto Health AWS Breach Exposes Millions of Patient Records","datePublished":"2026-09-02T08:50:09+00:00","dateModified":"2026-09-03T11:36:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/"},"wordCount":831,"commentCount":0,"publisher":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp","articleSection":["Supply Chain Attack","Cloud and SaaS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/","url":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/","name":"Aesto Health AWS Breach Exposes Millions of Patient Records","isPartOf":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#primaryimage"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp","datePublished":"2026-09-02T08:50:09+00:00","dateModified":"2026-09-03T11:36:46+00:00","description":"A healthcare data breach at Aesto Health exposed AWS-hosted protected health information for 9.5M patients. Learn what and how to respond.","breadcrumb":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#primaryimage","url":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp","contentUrl":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/Aesto-Health-AWS-Breach-Exposes-Millions-of-Patient-Records.png?format=webp","width":1340,"height":700,"caption":"Aesto Health AWS Breach Exposes Millions of Patient Records"},{"@type":"BreadcrumbList","@id":"https:\/\/www.hexnode.com\/threat-watch\/aesto-health-aws-breach-exposes-millions-of-patient-records\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hexnode.com\/threat-watch\/"},{"@type":"ListItem","position":2,"name":"Aesto Health AWS Breach Exposes Millions of Patient Records"}]},{"@type":"WebSite","@id":"https:\/\/www.hexnode.com\/threat-watch\/#website","url":"https:\/\/www.hexnode.com\/threat-watch\/","name":"Hexnode Threat Watch","description":"Latest cyber threats, smarter enterprise response.","publisher":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization"},"alternateName":"Threat Watch","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hexnode.com\/threat-watch\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization","name":"Hexnode","url":"https:\/\/www.hexnode.com\/threat-watch\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/logo\/image\/","url":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/hexnode-2.png?format=webp","contentUrl":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/hexnode-2.png?format=webp","width":100,"height":100,"caption":"Hexnode"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hexnode\/","https:\/\/x.com\/thehexnode","https:\/\/www.linkedin.com\/company\/hexnode"]},{"@type":"Person","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/person\/072b33718ec5df7cb7dbb9bae93044fa","name":"Lily Anne","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a5e6255489d50e4ae3ff1f9194f7ae879725d6b1d5eb4c9ec7a7f9ba3f66124e?s=96&d=mm&r=g","caption":"Lily Anne"},"description":"Content writer at Hexnode. Fueled by good coffee and the occasional cat cuddle, I enjoy crafting content that informs, connects, and resonates. Nothing excites me more than knowing my words have been read, appreciated, and maybe even bookmarked.","url":"https:\/\/www.hexnode.com\/threat-watch\/author\/lily-anne\/"}]}},"_links":{"self":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/comments?post=1344"}],"version-history":[{"count":4,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1344\/revisions"}],"predecessor-version":[{"id":1374,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1344\/revisions\/1374"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/media\/1383"}],"wp:attachment":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/media?parent=1344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/categories?post=1344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}