Astrana Health filed a Form 8-K with the SEC on 22 September reporting that attackers impersonated company personnel and spoofed the company's main corporate telephone number, using that pretext to contact employees and ultimately gain access to company servers. The filing states the company believes "certain private and/or confidential information maintained on the Company's servers has been accessed and/or acquired without authorization", and that it restored certain systems from clean backups — language consistent with a ransomware or destructive incident, though the company did not confirm ransomware when asked. No customer count or data category was disclosed; Astrana says the potential sensitivity of the data makes the incident material to its financial position, and warns of impact on operations, patients, providers and reputation. Astrana is one of the largest US healthcare technology firms, reporting US$972.5 million in revenue last quarter from an operations platform serving about 20,000 medical providers. No group had claimed the attack as of 24 September.

• Source article