Other Events ·
Astrana Health discloses cybersecurity incident involving unauthorized access to sensitive data
ASTHAstrana Health, Inc.
Astrana Health disclosed a material cybersecurity incident involving social engineering attacks where threat actors impersonated company personnel to gain unauthorized access to systems. The company detected the activity, engaged third-party forensic firms, notified law enforcement and regulators, and implemented remedial measures such as credential resets and system restoration. Astrana believes private and confidential information on its servers was accessed or acquired without authorization. While the full scope of patient, employee, and business data exposure remains under investigation, the company considers the incident material due to the sensitive nature of the data involved. Although unable to estimate the total financial impact, including remediation costs and potential legal liabilities, Astrana does not currently expect a material effect on its financial condition or results of operations. The company operates in the healthcare management services industry.