Astrana Health, Inc.: material cybersecurity incident (SEC 8-K)
Astrana Health's subsidiary detected unauthorized access resulting from social engineering attacks in which threat actors impersonated company personnel to obtain system access. The company confirmed that certain private and confidential information on its servers was accessed and/or acquired without authorization. Investigation remains ongoing to determine the full scope of data accessed, including potential patient, employee, and business information.
Sources
- Primary: https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm
- Upstream: SEC EDGAR · 8-K Item 1.05, the same document as the primary source.
- Material cybersecurity incident disclosures from SEC EDGAR Form 8-K, Item 1.05
Defenses for this class of incident
all categoriesA data breach sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.