Loading story…
Nutex Health, a Houston-based healthcare services and hospital-operations company, disclosed that an unauthorized third party accessed its network and exfiltrated files from certain servers. The potentially exposed information may include confidential or private data involving patients, employees, providers, business and financial operations, and intellectual property; the company is still determining the exact data types and affected individuals or partners.
The company activated its incident-response plan, retained external forensic specialists, implemented containment measures, and notified law enforcement. Nutex said the attacker could leak the stolen data, although no threat group had publicly claimed responsibility. As of its disclosure, Nutex reported no material impact on operations or financial-reporting systems and does not expect a material effect on its strategy, financial condition, or operating results.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Nutex stated that, as of August 24, it had identified no material impact on operations or financial-reporting systems and did not believe the incident was reasonably likely to materially affect its business strategy, operations, financial condition, or results.
After detecting the intrusion, Nutex activated its cybersecurity response plan, engaged external incident-response and forensic specialists, implemented containment measures, and notified law enforcement. The company said no cybercrime group had publicly claimed responsibility and that the attacker could leak the exfiltrated information.
Nutex Health reported in an SEC Form 8-K that an unauthorized party accessed its network and exfiltrated files from certain servers. The company said the data may include private or confidential patient, employee, provider, business, financial, or intellectual-property information, while the scope and affected individuals remain under investigation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
5 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcescworld.com
Open sourcesecurityweek.com
Open sourcebleepingcomputer.com
Open sourcesec.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Houston-based healthcare facilities operator **Nutex Health** disclosed that unauthorized actors accessed its network and exfiltrated files containing patient, employee, provider, business, and confidential financial information. The company said it is investigating the incident, including the affected data volume and operational impact, and reported no identified material impact to business operations or financial-reporting systems. Attackers are extorting Nutex and have threatened to publish the stolen data. The **Gentlemen** ransomware-as-a-service group, also tracked as **Storm-2697**, claimed responsibility by listing Nutex on its leak site, though Nutex has not independently confirmed the attribution. A proposed Texas class-action lawsuit alleges that personally identifiable information and protected health information were compromised.
Sep 4, 2026
Nacogdoches Memorial Hospital in Texas disclosed that a January cyberattack exposed the personal and medical information of **257,073 patients** after attackers gained access to its network on **January 15** and remained undetected for roughly two weeks. Public reporting and breach notification materials indicate the stolen data included names, Social Security numbers, medical record numbers, health insurance and health plan beneficiary details, and other sensitive healthcare information; the hospital also said patient photos may have been affected. The regional medical center said it has not identified misuse of the stolen data so far, but the scale and sensitivity of the breach make it a significant healthcare privacy incident. In response, the hospital said it implemented additional network security measures and security awareness training, while reports noted it did **not** offer complimentary credit monitoring to affected individuals and did not provide further detail on the intrusion or whether employee and support staff data was also compromised.
Jun 29, 2026
Nacogdoches Memorial Hospital, an independent health system in Texas, disclosed a cyberattack that exposed sensitive information belonging to **257,073 individuals**. The hospital said staff identified an ongoing intrusion on January 31, while a filing to Maine indicated the incident date was January 15, creating some uncertainty around the precise timeline of the breach. The compromised data may include names, contact information, **Social Security numbers**, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and in some cases full-face photographs. Reporting indicated the incident had not yet appeared on the U.S. Department of Health and Human Services public breach portal at the time of disclosure, and it remained unclear whether the total affected population included only patients or also employees.
Jun 29, 2026