Cyberattacks target Stake investment platform and Astrana healthcare tech

Two separate cyberattacks have compromised personal and confidential data at Stake and Astrana.

In Australia, the investment platform Stake reported that a cyberattack on its US-based service provider, DriveWealth, exposed customer information. The exposed data includes names, email addresses, phone numbers, postal addresses, and tax status. Stake stated that trading accounts, portfolios, bank details, and tax file numbers were not compromised. DriveWealth attributed the breach to a social-engineering campaign and has contained the incident, though customers have been warned of potential phishing and impersonation risks.

In the United States, healthcare technology firm Astrana notified the Securities and Exchange Commission (SEC) of a breach involving unauthorized access to company servers. The attack involved hackers impersonating personnel and spoofing the company’s corporate telephone number to gain access. Astrana reported that certain systems had to be restored from clean backups and noted that the potential loss of sensitive data could materially impact the company’s financial condition, operations, and reputation.