Nebraska Orthopaedic Center
bd_bf704f7baef228c1 · schema v1 · pii pii-v2
Full breach record for Nebraska Orthopaedic Center →Aesto LLC d/b/a Aesto Health, a healthcare data migration and archiving service provider, experienced a network security incident impacting its AWS infrastructure. An unauthorized actor copied data between December 2 and December 18, 2025. The incident was discovered on December 18, 2025. Affected data for Nebraska Orthopaedic Center patients included names, Social Security numbers, medical record numbers, dates of birth, and financial account numbers. Approximately 47 New Hampshire residents were affected. Aesto engaged forensic specialists, contained the incident, and is offering credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 2, 2025
Begins
Jun 26, 2026
Discovered
Aug 19, 2026
Filed
vs. sector median
1 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Washington State AGbd_006679bfb3ccd1c92026-08-19Verified
- Oregon State AGbd_4750be7f8e77a00d2026-08-19Verified
- Vermont State AGbd_7cff054a53fd097f2026-08-19Verified
- California State AGbd_075703db34849ec02026-08-20 · +1dVerified
Show 1 more filing ↓Show fewer ↑up to 18d gap
- Massachusetts State AGbd_9ddfa8bced87de0b2026-08-01 · +18dCandidate
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Aug 1 (MA), last Aug 20 (CA) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.