Astrana Health Discloses Data Breach Following Social Engineering Attack

Astrana Health has confirmed a data breach involving its subsidiary, Astrana Health Management, after attackers used social engineering to gain unauthorised access to its servers and exfiltrate confidential information.

The California-based healthcare management company disclosed the incident in a filing with the US Securities and Exchange Commission (SEC). The breach was facilitated by attackers impersonating company staff and spoofing Astrana Health’s main phone number to target employees.

Impact on Sensitive Data

The company is currently assessing the scope of the exfiltrated data. The investigation is attempting to determine if patient records, employee information, credentialed provider data, intellectual property, or confidential business and financial information were compromised.

Astrana Health stated that the incident is material due to the sensitive nature of the potential data involved, although it does not anticipate any significant impact on its financial condition or operations.

Remediation and Response

Following the detection of the intrusion, Astrana Health engaged a third-party cybersecurity firm and notified the relevant authorities and business partners. To secure its environment, the company has rotated credentials, restricted remote access tools, and rebuilt specific systems using clean backups.

Additional security measures, including enhanced monitoring, logging, and detection capabilities, have been implemented. No specific threat actor or ransomware group has been identified in connection with the attack.