Astrana Health Data Breach Exposes Confidential Information

• •Astrana Health suffered a data breach due to social engineering targeting employees.
• •Confidential information may have been accessed and exfiltrated from company servers.
• •The company is investigating the breach and has engaged third-party cybersecurity experts.

Astrana Health reported a data breach involving its subsidiary, Astrana Health Management, due to social engineering attacks targeting employees. The attackers impersonated company personnel and spoofed the corporate phone number to gain unauthorized access to company systems. Preliminary investigations indicate that private and confidential information may have been accessed and exfiltrated from the company's servers. Astrana Health engaged third-party cybersecurity experts and notified relevant authorities while launching an internal investigation. The company is assessing the extent of the data accessed, which could include patient, employee, and business information. Astrana Health has implemented security measures such as credential rotation and system rebuilding from clean backups. The investigation is ongoing, and notifications will be made to affected individuals once the scope is fully determined.