Astrana Health breach: social engineering led to data theft

Hackers used social engineering, impersonating Astrana Health staff and spoofing its main phone number, to access company servers and exfiltrate private and confidential information. The incident involved subsidiary Astrana Health Management; the company notified the SEC, rotated credentials, restricted remote access and rebuilt some systems from clean backups.

• Attack used social engineering and spoofed Astrana phone number
• Private and confidential data exfiltrated from servers
• Subsidiary Astrana Health Management affected
• Credentials rotated and systems rebuilt from clean backups