Aesto class action lawsuits overview:
- Who: Four plaintiffs filed three class action lawsuits against Aesto LLC, which does business as Aesto Health, and three healthcare providers that use its data services.
- Why: The plaintiffs claim Aesto’s inadequate cybersecurity allowed hackers to steal patients’ sensitive personal and health information in a data breach.
- Where: The Aesto class action lawsuits were all filed in Alabama federal court.
Three new class action lawsuits accuse Aesto Health of failing to protect the personal and medical information of thousands of patients in a nationwide data breach.
“The exposure of one’s private information to cybercriminals is a bell that cannot be unrung,” the lawsuits say.
Plaintiff John Doe filed a class action lawsuit on behalf of his minor daughter against Aesto and Everside Health. Plaintiffs Victoria Reyes and Angel Rodriguez brought a second lawsuit against Aesto and VillageMD, and plaintiff Fred Shatzoff filed a third against Aesto and Allied Health.
The Aesto data breach lawsuits allege cybercriminals infiltrated Aesto’s systems between Dec. 2 and Dec. 18, 2025, stealing patients’ names, dates of birth, medical information, Social Security numbers and financial account details.
The lawsuits claim Aesto waited 204 days after the breach began before notifying victims on June 24, 2026, delaying their ability to protect themselves.
The plaintiffs argue the breach was foreseeable because Aesto disclosed a similar 2022 breach that exposed about 17,400 people’s health records, showing what they call a pattern of inadequate cybersecurity.
The Aesto class action lawsuits each seek to represent a nationwide class of everyone whose data was exposed in the data beach, excluding Alabama residents, and a second class limited to patients of the named healthcare provider.
Aesto data breach plaintiffs report scam calls; others fear future harm
Plaintiffs Reyes and Rodriguez each claim that after the Aesto data breach, they experienced a spike in spam and scam emails, texts and phone calls and spent about 30 minutes researching the breach and calling Aesto’s breach hotline to protect their accounts.
Doe, on behalf of his minor daughter, and Shatzoff claim their private information now carries a diminished value, that they lost the benefit of the bargain they paid for when trusting Aesto with adequate data security, and that they face a substantially increased risk of fraud and identity theft in the future.
All four plaintiffs claim lasting stress, fear and frustration from having their sensitive health data exposed to criminals, and each says they must now spend time and money monitoring their accounts against future misuse.
The class action lawsuits collectively allege negligence, negligence per se, breach of implied contract, invasion of privacy, unjust enrichment and breach of fiduciary duty. Two of the three lawsuits also seek a declaratory judgment, and all demand a jury trial.
In other data breach news, the American Consumer Credit Counseling has agreed to a class action settlement to resolve claims that it failed to prevent a cyberattack in 2025 that compromised sensitive consumer information.
Did you receive a data breach notice from Aesto Health? Let us know in the comments.
The plaintiffs are all represented by Jonathan S. Mann and Austin B. Whitten of Pittman, Dutton, Hellums, Bradley & Mann P.C.
The Aesto class action lawsuits are Doe v. Aesto LLC, et al., Case No. 2:26-cv-01549-MHH; Reyes, et al. v. Aesto LLC, et al., Case No. 2:26-cv-01558-ACA; and Shatzoff v. Aesto LLC, et al., Case No. 2:26-cv-01555-ACA, all in the U.S. District Court for the Northern District of Alabama, Southern Division.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
One thought on Data breach fuels multiple Aesto class action lawsuits
I just got an email saying my info (ss#, medical info, address & phone) is part of the data breach from Aesto LLC. I want to be apart of the class action. Please contact me.