Astrana Health
Disclosed Sep 23, 20262 days agoConfirmed
Astrana Health says phone-spoofing social engineering led to data theft
Astrana Health told the SEC that attackers impersonated staff and spoofed its main phone number to gain access, and that confidential information on its servers was accessed or acquired, possibly including patient, employee and provider data.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 23, 2026 |
| Discovered | Sep 22, 2026 |
| Attack | Phishing |
| Data exposed | Health, Employment, Financial, Internal documents |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Astrana Health, Inc. Form 8-K, Item 1.05 (2026-09-23)sec.gov · SEC filing | SEC filing |
| Astrana latest healthcare tech firm to report data breach to SECtherecord.media · News | News |
Notices filed
History of this record
- 2026-09-25 · attack: unknown to phishing · seed source
- 2026-09-25 · data_types: [] to ["health","employment","financial","internal-docs"] · seed source
- 2026-09-25 · discovered: empty to 2026-09-22 · seed source
- 2026-09-25 · summary: empty to Astrana Health told the SEC that attackers impersonated staff and spoofed its main phone number to gain access, and that confidential information on its servers was accessed or acquired, possibly including patient, employee and provider dat · seed source
- 2026-09-25 · title: Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Astrana Health says phone-spoofing social engineering led to data theft · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.