---
schema_version: "secwatch.filing_event.v1"
accession: "0001104659-26-109813"
form_type: "8-K"
ticker: "ASTH"
cik: "0001083446"
company_name: "Astrana Health, Inc."
filed_at: "2026-09-23T11:30:13+00:00"
generated_at: "2026-09-23T11:35:29.735003+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.85
calibrated_materiality_score: 0.85
confidence: "high"
source: SEC EDGAR
---

# Astrana Health discloses cybersecurity incident; data possibly accessed via social engineering

## Summary
- Incident detected at subsidiary Astrana Health Management; social engineering spoofed corporate phone number to access systems.
- Engaged third-party cybersecurity firm, notified law enforcement, regulators, and payer partners.
- Remedial measures: reset credentials, restricted remote access, restored from clean backups, enhanced monitoring.
- Believes private/confidential info accessed without authorization; assessing patient, employee, provider data.
- Deemed material as of Sept 22, 2026; cannot estimate full impact; maintains cyber insurance but expects no material financial effect.

## SEC filing metadata
- accession: 0001104659-26-109813
- form_type: 8-K
- ticker: ASTH
- cik: 0001083446
- company_name: Astrana Health, Inc.
- filed_at: 2026-09-23T11:30:13+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.85
- calibrated_materiality_score: 0.85
- confidence: high
- sec_items: 1.05
- EDGAR index: https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/0001104659-26-109813-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0001104659-26-109813
- JSON: https://secwatch.observer/filing/0001104659-26-109813.json
- Plain text: https://secwatch.observer/filing/0001104659-26-109813.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.