The healthcare firm Astrana warned regulators that hackers accessed confidential information by impersonating company personnel.