Nebraska Orthopaedic Center, P.C., a physician-owned healthcare provider group, experienced a data breach through its third-party data migration and archiving vendor, Aesto Health. The incident involved unauthorized access and copying of protected health information. Affected individuals began receiving notification letters dated August 18, 2026. This breach was disclosed via a California Attorney General listing and a Massachusetts breach notification letter.
The breach exposed various types of data, including full name, medical record number, date of birth, and Social Security number. Additional data categories reported in public coverage include driver’s license numbers, financial account numbers, health insurance information, taxpayer identification numbers, and government ID numbers. The total number of impacted individuals has not been publicly disclosed by Nebraska Orthopaedic Center, P.C.
While there are reports of investigation activity, no class action lawsuits have been confirmed. Details such as the exact number of affected individuals and the company’s official breach statement remain unclear. Information regarding this incident may continue to emerge.