{"id":"nutex-health-data-theft-leak-aug-2026","category":"breach","status":"closed","title":"Nutex Health breach: data stolen from hospital operator's servers, then posted online by attacker","tldr":"Nutex Health, which runs 28 US healthcare facilities, says an attacker stole patient, employee, provider and financial data, then posted it online (10 Sep). Number affected not disclosed. If you've been treated there, watch for notification letters and scam contact.","summary":"Nutex Health, a US operator of 28 healthcare facilities across 12 states, told the SEC on 24 August 2026 that an unauthorised third party had accessed and removed information from its servers. On 31 August it said the data includes patient, employee, credentialed provider, and business and financial information, and that the attacker had threatened to publish it. On 10 September it said the attacker had posted the data on its website. Nutex was still checking what the data contains and whether it is genuine, and expected the review to take several weeks. Nutex has not said how many people are affected or which patient details were taken. Infosecurity Magazine reported that the ransomware group The Gentlemen claimed the attack; Nutex has not confirmed this. The company reports no material impact on operations or financial reporting and says it will notify affected patients and employees. Several class actions have been filed in Texas. The latest source we found is dated 10 September; later notifications may exist that we did not find.","action":"If you or a parent have been treated at a Nutex Health facility, watch for a notification letter and read it carefully. Be cautious of unexpected calls, texts or emails about medical bills or accounts, and consider a credit freeze if you receive notice.","product":"Nutex Health hospitals and emergency facilities (US)","audience":"both","severity":"high","patch":"na","exploited":false,"cves":[],"tags":["data-breach","healthcare","nutex","patient-data","data-leak","ransomware","united-states"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Nutex Health Form 8-K, 24 August 2026","url":"https://www.sec.gov/Archives/edgar/data/1479681/000162828026058606/nutx-20260824.htm","by":"Nutex Health (SEC)","date":"2026-08-24"},{"kind":"advisory","title":"Nutex Health Form 8-K (Item 1.05), 31 August 2026","url":"https://www.sec.gov/Archives/edgar/data/0001479681/000162828026059602/nutx-20260831.htm","by":"Nutex Health (SEC)","date":"2026-08-31"},{"kind":"advisory","title":"Nutex Health 8-K cybersecurity update press release, 10 September 2026","url":"https://www.sec.gov/Archives/edgar/data/0001479681/000162828026061432/materiality_assessmentxupd.htm","by":"Nutex Health (SEC)","date":"2026-09-10"},{"kind":"news","title":"Hospital operator Nutex Health says data stolen in cyberattack","url":"https://www.bleepingcomputer.com/news/security/hospital-operator-nutex-health-says-data-stolen-in-cyberattack/","by":"BleepingComputer","date":"2026-08-25"},{"kind":"news","title":"Nutex Health Says Patient Data Stolen, Hackers Threaten Leak","url":"https://infosecurity-magazine.com/news/nutex-patient-data-stolen","by":"Infosecurity Magazine","date":"2026-09-02"}],"started":"2026-08-24","closed":"2026-09-10","created":"2026-11-03T21:32:31.351Z","updated":"2026-11-03T21:32:31.351Z","cve_notes":[],"timeline":[{"at":"2026-09-10","added":"2026-11-03T21:28:26.316Z","kind":"wider-attacks","text":"Nutex said the attacker had posted the allegedly stolen data on its website. The company was analysing it to check what it contains and whether it is genuine, expected the review to take several weeks, and said several class actions were now filed in Texas. It still gave no count of affected people.","url":"https://www.sec.gov/Archives/edgar/data/0001479681/000162828026061432/materiality_assessmentxupd.htm","by":"Nutex Health (SEC filing)","patch":null},{"at":"2026-09-02","added":"2026-11-03T21:28:26.316Z","kind":"other","text":"Infosecurity Magazine reported that the ransomware group The Gentlemen had reportedly claimed the attack on its dark web site. This claim was not in Nutex's own filings.","url":"https://infosecurity-magazine.com/news/nutex-patient-data-stolen","by":"Infosecurity Magazine","patch":null},{"at":"2026-08-31","added":"2026-11-03T21:28:26.316Z","kind":"vendor-revised","text":"In a second filing, Nutex said the stolen information includes patient, employee, credentialed provider, and business and financial information, and that the third party had threatened to publish it. It reported no material impact on operations or financial reporting so far.","url":"https://www.sec.gov/Archives/edgar/data/0001479681/000162828026059602/nutx-20260831.htm","by":"Nutex Health (SEC filing)","patch":null},{"at":"2026-08-27","added":"2026-11-03T21:28:26.316Z","kind":"other","text":"A putative class action, Haley v. Nutex Health, Inc., was filed in the US District Court for the Southern District of Texas (Houston), alleging negligence and related claims.","url":"https://www.sec.gov/Archives/edgar/data/0001479681/000162828026059602/nutx-20260831.htm","by":"Nutex Health (SEC filing)","patch":null},{"at":"2026-08-25","added":"2026-11-03T21:28:26.316Z","kind":"other","text":"BleepingComputer reported the filing. It found no group claiming the attack at that point, and Nutex had not said whether the intrusion involved ransomware.","url":"https://www.bleepingcomputer.com/news/security/hospital-operator-nutex-health-says-data-stolen-in-cyberattack/","by":"BleepingComputer","patch":null},{"at":"2026-08-24","added":"2026-11-03T21:28:26.316Z","kind":"disclosed","text":"Nutex Health told the SEC it had found unauthorised activity on its network and that an unauthorised third party accessed and removed information from its servers. It did not say who or how many people were affected, and said it had notified law enforcement and hired outside experts.","url":"https://www.sec.gov/Archives/edgar/data/1479681/000162828026058606/nutx-20260824.htm","by":"Nutex Health (SEC filing)","patch":"na"}],"url":"https://hard.fyi/live/nutex-health-data-theft-leak-aug-2026/","json":"https://hard.fyi/api/live?id=nutex-health-data-theft-leak-aug-2026"}