SEC EDGAR shows 1 Form 8-K cybersecurity-related filing dated September 23, 2026, including 1 Item 1.05 material cybersecurity incident disclosure (amendments collapsed per issuer/incident).
These are investor disclosures by public companies, not state AG consumer notices or HIPAA OCR counts. Item 1.05 is for incidents the issuer determined material; Item 8.01 may disclose cyber events before or without a materiality determination.
September month-to-date: 7 distinct cyber-related 8-K filing families (3 Item 1.05) through September 23, 2026 in our tracker.
Filings Dated September 23, 2026
| Company | Ticker(s) | State | Item | Filed |
|---|---|---|---|---|
| Astrana Health, Inc. | ASTH | CA | 1.05 | 09/23/2026 |
Figures and narratives in the underlying 8-Ks can change via amendments (8-K/A). Always open the EDGAR primary document before drafting deeper coverage.
Independent Cybersecurity Audits
EmailMeNow domain audits on September 23, 2026 scored 1 filer domain in this batch. 1 of 1 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Astrana Health, Inc. | astranahealth.com | 79% | 90% | 15% | 92% | Good |
Audit links: astranahealth.com
Related trackers
- All state AG trackers
- Have I Been Pwned 2026 tracker
- Breach monitoring guide
- Ransomware threat landscape
Source: SEC EDGAR full-text search — Form 8-K Item 1.05
Not legal advice — independent summary of public SEC filings.