Astrana Health discloses cybersecurity incident in SEC Form 8-K filing
Astrana Health discloses a cybersecurity incident in SEC filing materials; details are not confirmed, so watch for official updates from the company.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, not confirmed; the filing excerpt references a cybersecurity incident but does not describe cause, entry point or exploitation
What happened
Astrana Health, Inc. discloses a cyber incident in an SEC Form 8-K filing, according to the filing listing on SEC EDGAR.
The available source text is Exhibit 99.2, Astrana’s Third Quarter 2026 Earnings Supplement dated November 2026. In its forward-looking statements, the company lists “statements relating to our cybersecurity measures and expectations regarding our ability to contain and remediate the cybersecurity incident” (SEC EDGAR).
The source text does not confirm the following:
- When the incident started or was detected
- How the incident occurred, or the entry point
- Which systems were involved
- Whether any data was accessed or taken, and if so what kind or how much
- Who was responsible
- Whether containment and remediation are complete
The source contains no independent verification beyond the company’s own filing.
Am I affected?
Not confirmed. The source does not say whether patients, members, partners or vendors are affected. Wait for direct notification or further disclosure from Astrana Health before drawing conclusions.
What to do now
- Read the full Form 8-K and its exhibits on SEC EDGAR for the company’s own description of the incident.
- If your organisation has a business relationship with Astrana Health, use your existing contacts there to ask whether your data or integrations are in scope.
- Watch for later SEC filings or company notices that may confirm the scope, the data involved and the remediation status.