Astrana Health discloses cybersecurity incident; data possibly accessed via social engineering

Astrana Health, Inc.

• Incident detected at subsidiary Astrana Health Management; social engineering spoofed corporate phone number to access systems.
• Engaged third-party cybersecurity firm, notified law enforcement, regulators, and payer partners.
• Remedial measures: reset credentials, restricted remote access, restored from clean backups, enhanced monitoring.
• Believes private/confidential info accessed without authorization; assessing patient, employee, provider data.
• Deemed material as of Sept 22, 2026; cannot estimate full impact; maintains cyber insurance but expects no material financial effect.