Livara Health Medical Group d/b/a SpineZone Data Breach – Investigated by Federman & Sherwood
August 31, 2026 – Federman & Sherwood, a national consumer protection law firm, is investigating the Livara Health Medical Group d/b/a SpineZone data breach following a notification filed with the California Attorney General.
According to the notice, the incident involved Aesto, LLC, a third-party company that provides healthcare data migration and archiving services for SpineZone. On or about December 18, 2025, Aesto experienced a network security incident affecting a limited portion of its Amazon Web Services infrastructure.
Aesto launched an investigation with external cybersecurity professionals and determined that between approximately December 2 and December 18, 2025, protected health information stored within its network may have been accessed and/or acquired by an unauthorized actor. Aesto completed its forensic investigation and manual document review on May 26, 2026, and notified SpineZone of the incident on June 26, 2026.
The affected information included individuals’ full names and additional protected health information. The publicly filed notice does not disclose the specific additional information involved. However, the notice states that the affected information did not include individuals’ mental or physical conditions, treatment information, or medical histories.
Aesto reports that it has no evidence that the affected protected health information has been misused for identity theft or financial fraud. As a precaution, affected individuals are being offered 12 months of complimentary TransUnion credit monitoring and identity theft protection services.
Federman & Sherwood is investigating whether Livara Health Medical Group d/b/a SpineZone, Aesto, LLC, and other responsible parties implemented reasonable cybersecurity safeguards to protect sensitive patient information and whether additional security measures could have prevented or reduced the impact of the data breach. The firm is also evaluating potential legal claims on behalf of affected individuals.
The potentially compromised information may include:
- Names
- Social Security numbers
- Medical information
- Health insurance information
- Other sensitive information
What is Livara Health Medical Group d/b/a SpineZone?
Livara Health Medical Group (doing business as SpineZone) is a value-based, virtual-first musculoskeletal and orthopedic care management company.
Individuals affected by the Livara Health Medical Group d/b/a SpineZone data breach may have legal rights and are encouraged to contact Federman & Sherwood to learn more about their options.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com