Lone Star Health Breach Impacts 250,130 Texans

Lone Star Community Health Center, a nonprofit Federally Qualified Health Center based in Conroe, Texas, disclosed a data breach linked to a security incident at Aesto, LLC. Aesto Health is a third-party vendor that provides healthcare data migration and archiving services.

The breach was disclosed to the Texas Attorney General on Aug. 14, 2026, with 250,130 Texas residents reported as affected. The health center also posted a notice of the data security incident online.

On or about Dec. 18, 2025, Aesto experienced a network security incident that impacted a limited portion of its Amazon Web Services infrastructure. Upon discovering the issue, Aesto launched an investigation, working closely with external cybersecurity professionals experienced in handling these types of incidents.

The incident impacted Lone Star Community Health Center, exposing sensitive personal and health-related information belonging to individuals connected to the health center.

The types of information involved included names, Social Security numbers, government-issued identification numbers (such as passport or state ID card numbers), medical information and dates of birth.

Lone Star Community Health Center's response to the breach

Lone Star Community Health Center notified affected individuals about the breach by U.S. Mail. Individuals who believe they may have been affected should watch for a notification letter from the health center and review it carefully upon receipt.

Affected individuals who have not yet received a notification letter but believe their personal or medical information may have been involved in the breach can reach Lone Star Community Health Center at 936-539-4004.

Aesto Health has also set up a dedicated toll-free response line at 833-918-8060, staffed with individuals familiar with the incident and knowledgeable about steps people can take to protect against misuse of their information. The line is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.