{
  "story_id": "67a844fc2105ac8409586eea7402dd98",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-02T12:35:00.000Z",
  "content_hash": "fd62d7def5c63c071456241d91a35add41f266865ad5b0ab4a126cc95df9551d",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "Aesto Health Data Breach Exposes 9.5 Million Patients",
    "dek": "Aesto Health reports a breach affecting over 9.5 million individuals via stolen PII and PHI.",
    "prose": "Aesto Health, a healthcare technology company based in Birmingham, Alabama, reported that more than 9.5 million people had their personal and health information stolen in a data breach. [^1]\n\nOn May 26, 2026, Aesto Health's investigation determined that hackers exfiltrated personally identifiable information (PII) and protected health information (PHI) between December 2 and December 18, 2025. [^2]\n\nThe compromised information includes names, Social Security numbers, driver's license numbers, other ID numbers, dates of birth, financial account numbers, medical information, health insurance information, and taxpayer identification numbers. [^3]\n\nAmerican healthcare technology company Aesto Health reported a cyberattack in December 2025 that breached its Amazon Web Services infrastructure. [^4]\n\nThe attack affected more than 9.5 million patients across over two dozen clients, including Village Practice Management, Everside Health, and Together Women's Health Medical Group. [^5]\n\nAesto Health notified the US Department of Health and Human Services (HHS) that 9,540,683 individuals are impacted by the data breach, and HHS added the company to its data breach portal. [^6]\n\nThe breach also exposed health records, medical histories, claims/billing information, and health insurance information. [^7]\n\nThe stolen data included personally identifiable information, full names, Social Security numbers, partial dates of birth, driver's license numbers, and state identification numbers. [^8]",
    "cited": "[{\"statement\":\"Aesto Health, a healthcare technology company based in Birmingham, Alabama, reported that more than 9.5 million people had their personal and health information stolen in a data breach.\",\"source\":\"SecurityWeek\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T09:09:34.000Z\",\"publisher_count\":1,\"sources\":[\"SecurityWeek\"]},{\"statement\":\"On May 26, 2026, Aesto Health's investigation determined that hackers exfiltrated personally identifiable information (PII) and protected health information (PHI) between December 2 and December 18, 2025.\",\"source\":\"SecurityWeek\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T09:09:34.000Z\",\"publisher_count\":1,\"sources\":[\"SecurityWeek\"]},{\"statement\":\"The compromised information includes names, Social Security numbers, driver's license numbers, other ID numbers, dates of birth, financial account numbers, medical information, health insurance information, and taxpayer identification numbers.\",\"source\":\"SecurityWeek\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T09:09:34.000Z\",\"publisher_count\":1,\"sources\":[\"SecurityWeek\"]},{\"statement\":\"American healthcare technology company Aesto Health reported a cyberattack in December 2025 that breached its Amazon Web Services infrastructure.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:35:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"The attack affected more than 9.5 million patients across over two dozen clients, including Village Practice Management, Everside Health, and Together Women's Health Medical Group.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:35:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"Aesto Health notified the US Department of Health and Human Services (HHS) that 9,540,683 individuals are impacted by the data breach, and HHS added the company to its data breach portal.\",\"source\":\"SecurityWeek\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T09:09:34.000Z\",\"publisher_count\":1,\"sources\":[\"SecurityWeek\"]},{\"statement\":\"The breach also exposed health records, medical histories, claims/billing information, and health insurance information.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:35:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]},{\"statement\":\"The stolen data included personally identifiable information, full names, Social Security numbers, partial dates of birth, driver's license numbers, and state identification numbers.\",\"source\":\"TechRadar\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T12:35:00.000Z\",\"publisher_count\":1,\"sources\":[\"TechRadar\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "0ddd25ead684ba17329b85a0890b4c2a",
      "thread_id": "3b57416e43d4f884613633ec4440082f",
      "thread_label": "Aesto Health",
      "novelty": "UPDATE",
      "content_hash": "23081a09d3e21a285920f62b1fe6281346fb42bf6effa37464a1993475573f1c",
      "last_published_at": "2026-09-02T12:35:00.000Z",
      "read_receipt": {
        "slice_hash": "8fe410958cd10217d13241bac8b241e2d6eb3302baab61763b0da291ac2553e2",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDJUMTI6MDc6NDUuMDAwMDAwWiIsImlkIjoiNzY2YWRiYjk1OTBjMDc4M2RhNGEwZGY0YTM5OTFhNGMiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDJUMTI6NDA6MzYuMzIwMDAwWiIsImlkIjoiYjE4N2ZiMmNmNTAwZDFlMTk5ZWUzYmFjODc1NzlkYzEiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 10113494,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "qcC6qjjt0_1_Rx01ilxduTIRfh6qJxQYDCB7PI4l_uo7_kNqzJTFWjPDMFXDZbu3XgIzeV7xKZfVIIkxdsiJDw",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-03T00:31:07.102Z"
  },
  "cited_facts": [
    {
      "statement": "Aesto Health, a healthcare technology company based in Birmingham, Alabama, reported that more than 9.5 million people had their personal and health information stolen in a data breach.",
      "source": "SecurityWeek",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T09:09:34.000Z",
      "publisher_count": 1,
      "sources": [
        "SecurityWeek"
      ]
    },
    {
      "statement": "On May 26, 2026, Aesto Health's investigation determined that hackers exfiltrated personally identifiable information (PII) and protected health information (PHI) between December 2 and December 18, 2025.",
      "source": "SecurityWeek",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T09:09:34.000Z",
      "publisher_count": 1,
      "sources": [
        "SecurityWeek"
      ]
    },
    {
      "statement": "The compromised information includes names, Social Security numbers, driver's license numbers, other ID numbers, dates of birth, financial account numbers, medical information, health insurance information, and taxpayer identification numbers.",
      "source": "SecurityWeek",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T09:09:34.000Z",
      "publisher_count": 1,
      "sources": [
        "SecurityWeek"
      ]
    },
    {
      "statement": "American healthcare technology company Aesto Health reported a cyberattack in December 2025 that breached its Amazon Web Services infrastructure.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:35:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "The attack affected more than 9.5 million patients across over two dozen clients, including Village Practice Management, Everside Health, and Together Women's Health Medical Group.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:35:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "Aesto Health notified the US Department of Health and Human Services (HHS) that 9,540,683 individuals are impacted by the data breach, and HHS added the company to its data breach portal.",
      "source": "SecurityWeek",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T09:09:34.000Z",
      "publisher_count": 1,
      "sources": [
        "SecurityWeek"
      ]
    },
    {
      "statement": "The breach also exposed health records, medical histories, claims/billing information, and health insurance information.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:35:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    },
    {
      "statement": "The stolen data included personally identifiable information, full names, Social Security numbers, partial dates of birth, driver's license numbers, and state identification numbers.",
      "source": "TechRadar",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T12:35:00.000Z",
      "publisher_count": 1,
      "sources": [
        "TechRadar"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}