Aesto Health Data Breach Class Action Lawsuits

Four plaintiffs initiated three separate class action lawsuits against Aesto LLC, which operates as Aesto Health, and three healthcare providers that utilize its data services. The core allegation is that Aesto's insufficient cybersecurity measures allowed unauthorized individuals to steal sensitive patient and health records in a major data breach.

The lawsuits claim that cybercriminals infiltrated Aesto's systems between December 2 and December 18, 2025, resulting in the theft of names, dates of birth, medical records, Social Security numbers, and financial account details. Plaintiffs argue that Aesto delayed notifying victims for 204 days, and that the breach was predictable given a prior 2022 breach. The legal claims brought include negligence, breach of implied contract, invasion of privacy, and breach of fiduciary duty.

The lawsuits seek to represent a nationwide group of people whose data was compromised, with a separate class limited to patients of the specific healthcare provider named in each suit. Plaintiffs report experiencing increased spam and scam communications and claim lasting stress and fear due to the exposure of their data. The lawsuits are currently filed in the U.S. District Court for the Northern District of Alabama, and plaintiffs are represented by Jonathan S. Mann and Austin B. Whitten of Pittman, Dutton, Hellums, Bradley & Mann P.C.