Aesto Health
Profile
Organisation tracking is available to eligible accounts.
Profile narrative
Aesto Health, also known as Aesto Health, is headquartered in the United States of America and operates within the health information sector. The organization provides services that involve the storage, processing, and management of personal and health data for healthcare provider clients. Its offerings include handling identifiers such as names, Social Security numbers, driver’s license numbers, state identification numbers, dates of birth, financial account numbers, medical and health insurance details, and taxpayer identification numbers. Aesto Health utilizes Amazon Web Services infrastructure to host its data environments. The organization serves healthcare providers across multiple states, as evidenced by incidents affecting at least two dozen client organizations.
Scale and impact are illustrated by the series of data breaches reported for Aesto Health. In December 2025, a breach of its AWS infrastructure exposed the personal information of more than 9.5 million individuals, including a broad range of identifiers and health‑related data. A separate incident later that month exposed personal details such as names, Social Security numbers, driver’s license numbers, state identification numbers, and dates of birth over a limited timeframe. Earlier, in December 2021, an extended unauthorized access to internal IT systems led to the copying of backup files containing names, dates of birth, radiology report findings, and physician names for 17,400 patients of Osceola Medical Center. These events demonstrate that Aesto Health manages large volumes of sensitive personal and health information and has faced significant security challenges. The organization’s handling of such data has attracted regulatory attention, with breaches being reported to the U.S. Department of Health and Human Services and added to its breach portal. No explicit details about ownership, parent, or subsidiary relationships are provided in the source material.
Incidents
3 incidents linked to this organisation.