California healthcare firm hit by cyber attack, confidential company data stolen

Healthcare management firm Astrana Health said it has suffered a major data security incident after threat actors gained unauthorised access to its internal network and stole confidential company information.

 

Headquartered in Alhambra, California, Astrana Health is a physician-centric healthcare management company focused on value-based care and population health management, supporting doctors and medical groups with care coordination, administrative services, data management, and digital tools.

 

In a filing with the U.S. Securities and Exchange Commission (SEC), Astrana Health said it detected unauthorised access to a portion of its subsidiary, Astrana Health Management’s, internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident.

 

It also activated its incident response and business continuity protocols and notified law enforcement authorities about the incident.

 

“The incident involved a series of social engineering attempts in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number, contacted certain employees in an effort to obtain unauthorised access to Company systems,” Astrana said.

 

While the healthcare management company has yet to disclose details of the compromised data, its preliminary investigation confirmed that “certain private and/or confidential information maintained on the Company’s servers has been accessed and/or acquired without authorisation.”

 

“The Company has also taken remedial measures, including resetting affected credentials, restricting remote access tools, restoring certain systems from clean backups, and enhancing monitoring, logging, and detection capabilities across its environment,” Astrana added.

 

The company is assessing whether sensitive data was compromised and evaluating the potential impact of the unauthorised activity and will share further details as they become available.

 

As of publication, no known hacker group had claimed responsibility for the cyber attack on Astrana Health. The healthcare management company also did not disclose who was behind the attack, the amount of data compromised, or whether it had received a ransom demand.