{"id":"nacogdoches-memorial-hospital-patient-breach-jan-2026","category":"breach","status":"closed","title":"Nacogdoches Memorial Hospital (Texas) breach potentially exposes 257,073 people's records","tldr":"A Texas hospital's network was breached in January 2026. Names, Social Security numbers, birth dates and medical and insurance IDs of up to 257,073 people may be exposed. If you get a letter, take it seriously: freeze your credit and watch insurance statements.","summary":"Nacogdoches Memorial Hospital in Texas says an unauthorised party compromised its computer network, and it became aware of the incident on 31 January 2026. It made the breach public on 31 March 2026. The hospital says data that may have been accessed includes names, addresses, phone numbers, email addresses, Social Security numbers, birth dates, medical record and account numbers, health plan beneficiary numbers and possibly photographs. It has reported 257,073 potentially affected people, a figure relayed by SecurityWeek and other outlets; one outlet reported a figure ten times larger, which does not match the others. The hospital says it notified law enforcement, regained control of its network, added security measures and mailed letters to potentially affected patients. It says it is not aware of any misuse of patient information. No ransomware group has been reported as claiming the attack, and the hospital has not said how the intruder got in or which systems were reached. Law firms have announced investigations into possible class actions. Whether credit monitoring is being offered is not confirmed by the pages HARD read.","action":"If you have been treated at Nacogdoches Memorial Hospital and get a letter, follow its steps. Consider a credit freeze, and check insurance statements for services you did not receive. Questions can go to the hospital on 888-460-3229.","product":"Nacogdoches Memorial Hospital patient records (Texas, US)","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["data-breach","healthcare","hospital","texas","social-security-numbers","medical-records","identity-theft"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Nacogdoches Memorial Hospital: data security incident notice","url":"https://nacmem.org/","by":"Nacogdoches Memorial Hospital","date":"2026-03-31"},{"kind":"news","title":"Nacogdoches Memorial Hospital says system hacked, possibly revealing patient data","url":"https://www.kltv.com/2026/04/01/nacogdoches-memorial-hospital-says-system-hacked-possibly-revealing-patient-data/","by":"KLTV","date":"2026-04-01"},{"kind":"news","title":"250,000 Affected by Data Breach at Nacogdoches Memorial Hospital","url":"https://www.securityweek.com/250000-affected-by-data-breach-at-nacogdoches-memorial-hospital/","by":"SecurityWeek","date":"2026-04-02"}],"started":"2026-01-31","closed":"2026-04-02","created":"2026-11-03T21:32:07.745Z","updated":"2026-11-03T21:32:07.745Z","cve_notes":[],"timeline":[{"at":"2026-04-02","added":"2026-11-03T21:28:26.316Z","kind":"other","text":"Press coverage, including SecurityWeek, reported that the hospital had put the number of potentially affected people at 257,073. Law firms began announcing investigations into possible class actions. The exact publication date of the SecurityWeek report was not available to HARD, so this date is approximate.","url":"https://www.securityweek.com/250000-affected-by-data-breach-at-nacogdoches-memorial-hospital/","by":"SecurityWeek","patch":"na"},{"at":"2026-03-31","added":"2026-11-03T21:28:26.316Z","kind":"other","text":"The hospital publicly disclosed the breach. It said it had notified law enforcement, activated its incident response plan, regained control of its network and was not aware of any misuse of patient information. It began mailing letters to potentially affected patients.","url":"https://www.kltv.com/2026/04/01/nacogdoches-memorial-hospital-says-system-hacked-possibly-revealing-patient-data/","by":"KLTV","patch":"na"},{"at":"2026-01-31","added":"2026-11-03T21:28:26.316Z","kind":"disclosed","text":"Nacogdoches Memorial Hospital in Texas became aware of a data security incident in which an unauthorised party had compromised its computer network and information systems.","url":"https://nacmem.org/","by":"Nacogdoches Memorial Hospital","patch":"na"}],"url":"https://hard.fyi/live/nacogdoches-memorial-hospital-patient-breach-jan-2026/","json":"https://hard.fyi/api/live?id=nacogdoches-memorial-hospital-patient-breach-jan-2026"}