Astrana Health says private and confidential information was stolen from its servers after employees were targeted in a social engineering attack.
Astrana Health is a California-based physician-centric healthcare management company that provides back-office services, including claims and billing.
The incident involved the company’s subsidiary Astrana Health Management, according to a filing with the US Securities and Exchange Commission (SEC).
Hackers used social engineering to access the company’s servers, impersonating Astrana Health personnel and spoofing its main phone number to contact employees.
After detecting the attack, the company engaged a third-party cybersecurity firm, notified the relevant authorities and its partners, and launched an investigation.
In response to the intrusion, Astrana Health rotated credentials, restricted remote access tools, rebuilt certain systems from clean backups, and improved its monitoring, logging, and detection.
The investigation has determined that the threat actors have accessed and exfiltrated certain private and confidential information from the company’s servers, Astrana Health told the SEC.