Privacy UnpackedIncident · one vendor, 6 organisations
The Aesto breach
31 July 2026 to 1 October 2026
6 organisations on the tracker had data taken through Aesto, which reported its own breach on 31 July 2026. Each one is listed with the words of the source that names Aesto.
The vendor
Organisations affected through Aesto
-
Everside Health (Aesto, LLC)
Social Security numbersHealth and medical informationDates of birth+2
22.2KTexas residents
Everside Health (Aesto, LLC)
Washington Attorney General -
Nebraska Orthopaedic Center (Aesto, LLC)
Social Security numbersHealth and medical informationDates of birth+1
992Washington residents
Nebraska Orthopaedic Center (Aesto, LLC)
Washington Attorney General -
Murfreesboro Medical Clinic (Aesto, LLC d/b/a Aesto Health)
Social Security numbersHealth and medical informationDates of birth+1
845Washington residents
Murfreesboro Medical Clinic (Aesto, LLC d/b/a Aesto Health)
Washington Attorney General -
Together Women's Health LLC (Aesto)
Social Security numbersHealth and medical informationDates of birth+2
1.5KTexas residents
Together Women's Health LLC (Aesto)
Texas Attorney General -
Marana Health Center
–not reported
Aesto, LLC ("Aesto") provides healthcare data migration and archiving services for Graham County Hospital
notice letter
Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Aesto as the way its data was taken.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.