Astrana Reports Cyberattack After Staff Impersonation and Phone-Number Spoofing

Summary
Astrana reported that attackers impersonated staff and spoofed its corporate phone number to access company servers. Confidential information was exposed; some systems were restored from clean backups. The number of affected clients and data taken are unknown.
Key points
- Astrana reported the cyberattack to regulators.
- Attackers accessed company servers by impersonating Astrana staff and spoofing the company's main corporate phone number.
- Confidential information was exposed, but the company did not disclose what data was taken.
- Some systems were restored from clean backups.
- Astrana notified authorities and affected customers.
- The number of affected clients was not disclosed.
Article Details
- Victim Organization
- Astrana
- Victim Domain
- astranahealth.com
- Incident Type
- Cyberattack involving impersonation of company staff and spoofing of the corporate phone number, resulting in exposure of confidential information.
- Disclosure Date
- 2026-09-22
- Data Types Exposed
- Confidential information
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Some systems were restored from clean backups. Astrana notified authorities and affected customers.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
