Nearly 10 Million Patient Records Exposed Through Compromised IT Management Tools

A Major Healthcare Breach Exposes Millions of Patient Records

Aesto Health, a healthcare organization, has disclosed that hackers successfully stole personal information belonging to approximately 9.5 million patients. The attackers gained access through a sophisticated method that involved weaponizing trusted IT management software—the kind of tools that companies use every day to manage their computer networks and systems.

The attack worked like this: criminals sent deceptive emails to employees at Aesto Health, pretending to be legitimate business communications. When staff members clicked on malicious links or opened infected attachments, the attackers gained a foothold inside the company's network. From there, the hackers used a popular tool called Faronics Deploy—which is normally used by IT departments to update software and manage computers remotely—to establish themselves as administrators with full control over company machines. They then installed additional software called ScreenConnect, which gave them persistent remote access to systems whenever they wanted.

What This Means

This breach represents a troubling shift in how cybercriminals operate. Rather than building attack tools from scratch, sophisticated hackers are now hijacking legitimate, trusted software that companies already rely on. It's similar to a thief stealing a janitor's master key instead of picking locks—it's faster, quieter, and less likely to trigger alarms. This approach makes their activities much harder to detect because the software they're using is supposed to be there.

The stolen patient data likely includes sensitive personal and medical information. In healthcare breaches, this typically means names, birthdates, social security numbers, insurance details, and medical histories. This combination of information is extremely valuable to criminals who can sell it, use it for identity theft, or leverage it for targeted scams.

Why You Should Care

If you or your family members received care from Aesto Health, your private medical information is now at risk. Criminals could use this data to impersonate you for fraudulent purposes, commit identity theft, or sell your information to other bad actors. Medical identity theft is particularly damaging because it can corrupt your medical records and interfere with legitimate healthcare you might need in the future.

Even patients who don't use these services should care about this pattern. When healthcare organizations get breached, it suggests that cybersecurity defenses across the industry may have gaps. Your own healthcare provider might face similar vulnerabilities.

This incident also highlights a critical cybersecurity lesson: trusted tools can become dangerous when the wrong people control them. Every software platform that manages computers creates potential risk if compromised.

What You Can Do

• Monitor your accounts: Watch your credit reports and bank statements for suspicious activity. Consider placing a fraud alert with credit bureaus.
• Change passwords: If you used the same password for Aesto Health accounts elsewhere, update those passwords immediately.
• Enable two-factor authentication: Add this extra security layer to important accounts like email and banking.
• Be cautious of contacts: Scammers may attempt to contact you using your stolen medical information, so verify requests before sharing additional details.
• Consider identity theft protection: Services that monitor for misuse of your personal information can provide additional peace of mind.

Organizations must implement stricter controls over administrative software and invest in better defenses against phishing attacks that serve as entry points for breaches like this one.