Breachesby GlyphAstrana Health
Disclosed Sep 23, 2026Confirmed
Astrana Health says phone-spoofing social engineering led to data theft
Astrana Health told the SEC that attackers impersonated staff and spoofed its main phone number to gain access, and that confidential information on its servers was accessed or acquired, possibly including patient, employee and provider data.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 23, 2026 |
| Discovered | Sep 22, 2026 |
| Attack | Phishing |
| Data exposed | HealthEmploymentFinancialInternal documents |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to phishingby seedSource
[] to ["health","employment","financial","internal-docs"]by seedSource
empty to 2026-09-22by seedSource
empty to Astrana Health told the SEC that attackers impersonated staff and spoofed its main phone number to gain access, and that confidential information on its servers was accessed or acquired, possibly including patient, employee and provider datby seedSource
Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Astrana Health says phone-spoofing social engineering led to data theftby seedSource
First recordedby backfillSource
First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.