Astrana Health flags material cybersecurity incident after social engineering attack on subsidiary

• Astrana Health flagged a material cybersecurity incident tied to social engineering attempts targeting employee access to company systems.
• Threat actors spoofed the main corporate phone number to impersonate personnel, seeking unauthorized entry into internal environments.
• Private or confidential information on company servers was accessed or acquired without authorization; the scope of any data exfiltration remains under review.
• Remediation included credential resets, tighter remote-access controls, system restores from clean backups, improved monitoring, logging, detection.
• Materiality determined Sept. 22, 2026; no current expectation of a material hit to financial condition or results of operations.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Astrana Health Inc. published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001104659-26-109813), on September 23, 2026, and is solely responsible for the information contained therein.