Astrana Health Data Breach Exposes Confidential Information

Astrana Health, a publicly traded healthcare company headquartered in Alhambra, California, disclosed a data breach involving unauthorized access to its computer systems. The total number of individuals affected has not been disclosed.

The breach was reported to the U.S. Securities and Exchange Commission on Sept. 22, 2026.

The breach involved a series of social engineering attempts targeting Astrana Health employees. In these attacks, unknown actors impersonated company personnel and spoofed the company's main corporate telephone number, contacting certain employees in an effort to obtain unauthorized access to company systems.

The company believes that certain private and confidential information about its investors was accessed and potentially disseminated as a result of the incident.

Because the investigation is ongoing, the full scope of the breach remains unclear.

The specific types of data that were compromised have not been publicly disclosed.

Astrana Health's response to the breach

Astrana Health is actively working to assess the full material impact of the breach. The company indicated it would amend its SEC filing as additional information becomes available.