Nebraska Orthopaedic Center

Nebraska Orthopaedic Center, P.C. notified California residents that a third-party vendor, Aesto LLC, experienced a security incident. Between December 2 and December 18, 2025, an unauthorized actor copied protected health information, including names, medical record numbers, dates of birth, and Social Security numbers. Aesto detected the incident on December 18, 2025. The organization engaged external cybersecurity professionals and is offering 12 months of credit monitoring to affected individuals.

Nebraska Orthopaedic Center, a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2026-06-26 and filed notice on 2026-08-19. 992 Washington residents were affected. 54 days elapsed between awareness and notification. 206 days to identify the breach. 0 days to contain the breach.

Nebraska Orthopaedic Center reported a data breach to the Oregon Attorney General. The breach was reported on 2026-08-19. The breach occurred during 12/2/2025 - 12/18/2025. The breach was discovered on 6/26/2026. 234,239 individuals were affected. Notice was sent on 8/19/2026.

Nebraska Orthopaedic Center reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-08-19. The reporting organization type is Health Care. 39 Vermont residents were affected. Categories of data breached: Social Security Numbers.

Aesto LLC d/b/a Aesto Health, a healthcare data migration and archiving service provider, experienced a network security incident impacting its AWS infrastructure. An unauthorized actor copied data between December 2 and December 18, 2025. The incident was discovered on December 18, 2025. Affected data for Nebraska Orthopaedic Center patients included names, Social Security numbers, medical record numbers, dates of birth, and financial account numbers. Approximately 47 New Hampshire residents were affected. Aesto engaged forensic specialists, contained the incident, and is offering credit monitoring services.

Nebraska Orthopaedic Center, P.C. notified patients of a data breach involving their protected health information. The incident occurred at Aesto, LLC, a third-party healthcare data migration and archiving service provider. Between December 2 and December 18, 2025, an unauthorized actor copied PHI including names, medical record numbers, dates of birth, and Social Security numbers from Aesto's AWS infrastructure. Aesto discovered the incident on December 18, 2025. The breach affected residents of Massachusetts and Rhode Island. Nebraska Orthopaedic Center is offering 24 months of credit monitoring services.