Healthcare data breach exposes 3.75M patient records

Live updates

1. 12d ago

   Aesto Health Breach Exposes Over 9.5 Million Patient Records

   Aesto Health confirmed a massive cyberattack on its Amazon Web Services infrastructure that compromised sensitive information for 9,540,683 individuals. The breach exposed personal details, Social Security numbers, and protected health data across at least 30 separate clients. This incident ranks as the second-largest healthcare data breach of 2026, highlighting ongoing vulnerabilities in cloud-based medical storage systems. Security teams and affected providers continue to assess the fallout from the unauthorized access.

   Why it matters

   The healthcare sector remains a prime target for cyberattacks, as demonstrated by recent security failures at CareCloud, Boston Scientific, and McKesson. Breaches of this magnitude put millions of patients at high risk of identity theft and medical fraud due to the exposure of deep personal and clinical records. Regulatory scrutiny on cloud infrastructure security in health technology firms is intensifying following these widespread events.

   What is confirmed

   • Aesto Health confirmed a data breach affecting 9,540,683 individuals.
   • Unauthorized access to Aesto Health AWS infrastructure exposed names, medical data, and Social Security numbers.
   • The Aesto Health cyberattack affected patients across at least 30 clients and ranks as the second-largest healthcare data breach of 2026.

   What to watch next

   • Further disclosures from Aesto Health regarding the specific clients affected by the AWS infrastructure breach.
   • Updates from Boston Scientific and McKesson on their service restoration efforts following separate cyberattacks.
   Sources used for this update (4)

   1. www.yahoo.com — More than 9.5 million patient records affected by Aesto Health data breach: what you need to know
   2. dailyhodl.com — Healthcare Firm Breach Exposes 9,540,683 Patient Records – Names, Social Security Numbers, Medical Data and More at Risk
   3. dailyhodl.com — Alabama-Based Health Tech Firm Breached, Affecting 9.5 Million Patients – Names, SSNs, Health Records at Risk
   4. www.bleepingcomputer.com — French hospital fined €500,000 after breach exposes data of 727,000
   confidence 100%
2. 14d ago

   Aesto Health breach exposes 9.5 million records as cyberattacks hit medical giants

   Aesto Health disclosed a data breach affecting 9,540,683 individuals after attackers accessed the company's AWS infrastructure. This incident adds to a series of healthcare security failures, including a CareCloud breach impacting 3.75 million patients and disruptive cyberattacks at Boston Scientific and McKesson. While CareCloud's breach hit providers like Brookhaven ENT, the Aesto event represents a larger single-entity exposure of personal and health data. Boston Scientific and McKesson are currently working to restore services following their respective attacks.

   Why it matters

   These breaches target critical health infrastructure and sensitive patient identifiers. The scale of these attacks suggests a systemic vulnerability across medical data management and supply chains.

   What is confirmed

   • Aesto Health disclosed a data breach affecting 9,540,683 individuals.
   • Attackers accessed Aesto Health's AWS infrastructure to expose personal and health data.
   • Boston Scientific and McKesson are working to restore services after disruptive cyberattacks.

   Still unconfirmed

   • Hackers claim to have stolen millions of records from McKesson.

   What to watch next

   • Confirmation of the total number of records stolen from McKesson
   • Details on the specific types of patient data compromised at Aesto Health
   Sources used for this update (4)

   1. www.yahoo.com — Multiple healthcare giants hit by data breaches affecting patient records, social security numbers, and even implanted cardiac devices
   2. cyberinsider.com — Aesto healthcare data breach impacts 9.5 million people
   3. securityaffairs.com — Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records
   4. www.bleepingcomputer.com — Aesto Health says data breach affects over 9.5 million patients
   confidence 95%
3. 15d ago

   CareCloud Data Breach Exposes 3.75 Million Patient Records

   A data breach at CareCloud has compromised the personal information of 3.75 million patients. The incident has impacted various healthcare providers, including Brookhaven ENT, where over 30,000 records were affected. This event occurs alongside a separate security incident at McKesson, a major U.S. distributor of medicines and medical devices, which has reported a hack resulting in intermittent service degradation. While the CareCloud numbers are specific, the full extent of the McKesson breach remains under investigation as hackers claim to have stolen millions of records.

   Why it matters

   CareCloud provides healthcare technology services to medical practices. These breaches highlight vulnerabilities in the supply chain of medical data management. The scale of these incidents increases the risk of identity theft for millions of patients across the U.S. healthcare system.

   What is confirmed

   • A data breach at CareCloud affected the personal data of 3.75 million patients.
   • Brookhaven ENT experienced a data incident linked to the CareCloud breach affecting over 30,000 people.

   Still unconfirmed

   • Hackers claim millions of patient records were stolen during a breach at McKesson.
   • McKesson expects intermittent service degradation following a hack.

   What to watch next

   • Official confirmation of the total number of records stolen from McKesson
   • Legal filings or class action updates regarding CareCloud patients
   • Statements from CareCloud regarding the specific types of patient data exposed
   Sources used for this update (4)

   1. Fox News — Healthcare data breach exposes 3.75M patient records
   2. Top Class Actions — CareCloud data breach now affects personal data of 3.75M patients
   3. teiss — News - Brookhaven ENT data incident linked to CareCloud breach, over 30,000 affected
   4. techcrunch.com — Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson
   confidence 80%