Astrana Health
US healthcare provider network based in Alhambra, California.
Astrana Health declared a cyber attack material in an Item 1.05 filing dated 22 September 2026, after callers posed as staff and spoofed its main phone number. It cited patient data, not money, as the reason.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Can stolen patient data make a breach material when profits are untouched?
Timeline for Astrana Health
Filed an Item 1.05 8-K over a phone-spoofing intrusion
Cybersecurity: Threats and Defences: Astrana Health files 8-K over phone spoofBackground
Astrana Health is a US healthcare company with its principal executive offices in Alhambra, California, and shares listed on Nasdaq as ASTH. It filed an Item 1.05 8-K with the Securities and Exchange Commission dated 22 September 2026, after attackers impersonated staff and spoofed its main corporate phone number to call employees and gain access.
Astrana judged the incident material because of the potentially sensitive patient, employee and provider data involved. It said it does not expect a material effect on its financial condition or results. It reset affected credentials, restricted remote access tools and restored some systems from clean backups. Astrana chose Item 1.05, the 8-K section the SEC keeps for incidents a filer considers material, over the optional Item 8.01 route that CenterPoint Energy, Veradigm and Conduent took.
Astrana and Boston Scientific were the only Item 1.05 filers found in an EDGAR search of 5 September to 12 October 2026. Astrana's filing stands out because it calls the attack material on the sensitivity of the data rather than on financial harm.
