← The Hacker in a Hoodie Index · On the Government Record

Aesto

Dec 2025 · Graded Verified · Healthcare and Life Sciences · Government record

AestoDec 2025

disclosed by Nebraska Orthopaedic Center, P.C.

Nebraska Orthopaedic Center was exposed through Aesto, the vendor holding its patient data in Amazon Web Services. An unauthorized actor copied protected health information, including identifiers that may include Social Security numbers. The trust boundary sat with the vendor, but the consequences fell right on top of the patients and the provider.

California AG breach notification

Not yet quantified

VVerifiedHealthcare and Life Sciences

About this record

This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.

← The complete On the Government Record ledger ← Back to the index