Ransomware.Live Second Ransomware Group Targets Astrana Health in Major Data Breach
Article Content
- •Falcon claims a 738 GB data breach at Astrana Health, following a prior claim by Chaos group.
- •Astrana Health previously reported a cybersecurity incident involving social engineering tactics.
- •No confirmation of ransomware claims has been made by Astrana Health as of now.
The ransomware group 'Falcon' has claimed responsibility for a data breach at Astrana Health, announcing a 738 GB data extraction that includes sensitive internal documents and patient information. This incident marks the second ransomware claim against Astrana Health within a month, following a previous claim by the Chaos ransomware group on October 9, which alleged a 1,500 GB data breach. Astrana Health, a healthcare services company listed on NASDAQ (ASTH), previously reported a cybersecurity incident involving social engineering tactics that allowed attackers to spoof corporate communications. The company has not confirmed the ransomware claims or the extent of the data breach. Analysts suggest that the presence of two ransomware groups targeting the same company may indicate data resale or shared access. Stakeholders, including patients and partners, are advised to be vigilant against potential phishing attempts related to this incident.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Chaos and Astrana Health in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What data has been claimed as stolen?
How should we respond to this incident?
Is there confirmation of the breach?
Continue Reading
Malicious Arch Linux AUR Packages Exploit Typos to Gain Root Access A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated popular tools yay and paru. The attack involved typosquatted package names, such as 'yyay', which contained legitimate code combined with a malicious installation script that executed a remote shell script with root…
Photon Health Data Breach Exposes Patient Information Photon Health, a Brooklyn-based healthcare technology company, disclosed a data breach on October 8, 2026, affecting patient data due to unauthorized access via a zero-day vulnerability in the Metabase application. The breach was discovered on August 21, 2026, after the Direwolf ransomware group claimed responsibility…