Kaniksu Community Health Data Breach – Investigated by Federman & Sherwood
September 8, 2026 – Federman & Sherwood, a national consumer protection law firm, is investigating the Kaniksu Community Health data breach following a notification filed with the California Attorney General.
According to the notice, the incident involved Aesto, LLC, a healthcare data management service provider used by Kaniksu Community Health. On or about June 26, 2026, Aesto informed Kaniksu that it had experienced a security incident involving its electronic health data management platform. The underlying Aesto security incident occurred on or about December 18, 2025.
Because Kaniksu used Aesto’s platform for healthcare data management services, patient information may have been accessed or acquired through the unauthorized access to Aesto’s platform. Aesto reportedly engaged cybersecurity professionals and conducted a manual review of the affected data as part of its investigation.
The publicly filed notice states that personal information belonging to Kaniksu patients may have been affected, but the specific data elements are left as a placeholder in the public version of the notice and therefore cannot be reliably identified. Kaniksu states that it has no evidence that affected personal information has been or will be misused as a result of the incident.
Kaniksu reports that it launched an investigation and engaged a national cybersecurity firm to help assess the scope of the incident. The organization is also evaluating additional measures to secure its systems and ensure its service providers maintain appropriate protections.
Affected individuals are being offered complimentary identity monitoring services through Kroll, including credit monitoring, fraud consultation, and identity theft restoration. The public notice does not specify the duration of the complimentary services.
Federman & Sherwood is investigating whether Kaniksu Community Health, Aesto, LLC, and other responsible parties implemented reasonable cybersecurity safeguards to protect sensitive patient information and whether additional security measures could have prevented or reduced the impact of the data breach. The firm is also evaluating potential legal claims on behalf of affected individuals.
The potentially compromised information may include:
- Names
- Social Security numbers
- Medical information
- Health insurance information
- Other sensitive information
What is Kaniksu Community Health?
Kaniksu Community Health is a Federally Qualified Health Center that provides integrated, affordable primary and preventive medical care to residents in Bonner and Boundary counties in North Idaho.
Individuals affected by the Kaniksu Community Health data breach may have legal rights and are encouraged to contact Federman & Sherwood to learn more about their options.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com