Grant County Public Hospital District #2

Grant County's patient data lived inside Aesto Health's AWS infrastructure, one vendor holding records for at least two dozen hospital clients at once. Hackers moved through that shared environment for sixteen days in December 2025, pulling names, Social Security numbers, driver's license numbers, financial accounts, and medical and insurance details, all told, touching 9.5 million people. The source names no entry point and no attacker; what it names instead is the design, one cloud tenancy standing in as the perimeter for two dozen separate hospitals. Concentration isn't efficiency when a single vendor breach becomes two dozen hospital breaches wearing one name.