[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjqqZB3NCVM63yxGH_6qk3dNIX9rgy2IhJNMHgYKRtLE":3},{"article":4,"iocs":36,"watch_terms":37,"solutions":38,"lesson":125},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"5d994972-e535-4a2e-88fd-0cad0962632e","Astrana Health Data Breach Impacts Private, Confidential Information","astrana-health-data-breach-impacts-private-confidential-information-890365","Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers. The post Astrana Health Data Breach Impacts Private, Confidential Information appeared first on SecurityWeek.","Astrana Health has reported a data breach resulting from a social engineering attack where hackers impersonated company personnel to gain server access. The incident, which involved the company's subsidiary Astrana Health Management, led to the exfiltration of private and confidential information. The company is still assessing the full extent of the compromised data, which could include patient, employee, and business information.","Astrana Health confirms data breach after social engineering attack on employees.","https:\u002F\u002Fwww.securityweek.com\u002Fastrana-health-data-breach-impacts-private-confidential-information\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F10\u002Fbank-finance-lender-credit-union-hack.jpeg","2026-09-24T09:56:04+00:00","2026-09-24T10:00:19.12568+00:00",7,[17,20],{"name":18,"type":19},"Astrana Health","vendor",{"name":21,"type":22},"social engineering","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":39,"vendors":124},[40,69,98],{"slug":41,"name":42,"problem":43,"products":44},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[45,53,61],{"vendor_slug":46,"vendor_name":47,"vendor_logo":48,"product_slug":49,"product_name":50,"url":51,"description":52},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":70,"name":71,"problem":72,"products":73},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":99,"name":100,"problem":101,"products":102},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[103,110,118],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":104,"product_name":107,"url":108,"description":109},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":119,"product_name":120,"url":122,"description":123},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":126,"title":127,"body":128,"framework_refs":129,"framework_notes":141},"social-engineering-attack-leads-to-health-data-breach-at-astrana-health","Social Engineering Attack Leads to Health Data Breach at Astrana Health","Astrana Health suffered a data breach after attackers used social engineering to impersonate company personnel and gain unauthorized server access, ultimately exfiltrating sensitive patient, employee, and business data. The root cause lies in insufficient identity verification controls and inadequate staff training to recognize and resist impersonation attempts. This matters greatly in healthcare, where compromised data can violate HIPAA regulations and expose individuals to identity theft, discrimination, and harm. The involvement of a subsidiary also highlights the risks of inconsistent security controls across affiliated entities. Until the full scope is assessed, the organization and affected individuals remain in a state of elevated risk.",[130,131,132,133,134,135,136,137,138,139,140],"CIS Control 4 – Controlled Use of Administrative Privileges","CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-53 IA-2 – Identification and Authentication","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 IR-4 – Incident Handling","NIST SP 800-53 AT-2 – Literacy Training and Awareness","HIPAA Security Rule §164.308(a)(5) – Security Awareness and Training","HIPAA Security Rule §164.308(a)(1) – Security Management Process","NIST CSF PR.AC-1 – Identities and Credentials Management","NIST CSF DE.CM-3 – Personnel Activity Monitoring",{}]