Astrana Health: 8-K cybersecurity incident (Item 1.05)

Astrana Health

Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment. The incident involved a series of social engineering attempts in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number,…

First seen: 23 Sept 2026
Last update: 23 Sept 2026, 00:00 UTC
Source: news

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Astrana Health: 8-K cybersecurity incident (Item 1.05)
Severity: unknown. Patch status: fix status unknown.
Affected: Astrana Health

Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment. The incident involved a series of social engineering attempts in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number,…

## Steps
1. Search the repo, its CI and infra config for Astrana Health. If present, report the version in use and whether it's affected.
2. No source names a fix yet; check the vendor advisory. Until one ships: restrict network access to it.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.sec.gov/ix?doc=/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm
https://pwned.coffee/i/astrana-health-8-k-cybersecurity-incident-item-1-05

Receipt

Exploitation: No known exploitation
Score: No CVSS published yet: severity unknown.
Last checked: 4 Nov 2026, 11:18 UTC

Sources: KEV – CVE record – Vendor –

SEC filings

Astrana Health, Inc., Form 8-K, Item 1.05, filed 2026-09-23
“Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment. The incident involved a series of social engineering attempts in which threat actors, impersonating Company personnel and spoofing the Company’s main corporate telephone number, contacted certain employees in an effort to obtain unauthorized access to Company systems.”

Sources

Astrana Health, Inc.: Form 8-K, filed 2026-09-23 (SEC)

Totalone coffee