Aesto Health told HHS that 9.5 million people had personal and health data stolen from its AWS infrastructure.