Astrana Health has suffered a data breach after attackers impersonated company personnel and contacted employees to gain access to its servers. The incident, reported by SecurityWeek, involved a social engineering campaign that successfully tricked staff into granting the hackers entry.
Once inside, the attackers accessed systems containing private and confidential information. The full scope of the exposed data has not been detailed, but the breach underscores the continuing threat of impersonation-based attacks against healthcare organizations.
Astrana Health has not yet disclosed how many individuals are affected or what specific data types were compromised. The company is likely to notify regulators and impacted parties as required under applicable breach notification laws.