Active Medium impact Data breach Checked 57m ago

Nutex Health data breach exposes patient records

Nutex Health says an unauthorized third party stole private information about patients, employees, and healthcare providers, along with business and financial information. The company says the stolen data has now been published online. Nutex is reviewing the data and has not confirmed its contents or authenticity. The Gentlemen claimed responsibility, but Nutex has not confirmed who was behind the attack.

Started
Aug 24, 2026
Latest activity
Sep 10, 2026
Attributed to
Not confirmedNo credible attribution yet
Where
United States
Sectors
Healthcare
Scale
Nutex Health's hospital division operates 28 facilities across 12 states.

Current status

On September 10, Nutex Health said the stolen data had been published online and that it was still reviewing its contents, scope, and authenticity.

Active: Confirmed and still going. Attacker activity or disruption is continuing.

Impact

An unknown third party stole private or confidential patient, employee, healthcare provider, business, and financial information from Nutex Health's servers. Nutex says the data was later published online. The company is still reviewing the data to determine its contents, scope, and authenticity. It says it has found no material impact on business operations or systems used for financial reports.

What to do

Nutex Health patients, employees, and healthcare providers should watch for a breach notice and check medical and financial accounts for activity they do not recognize.

Timeline

  1. Sep 10, 2026

    Nutex Health said the unauthorized third party had published data allegedly taken during the incident. The company said it was downloading, processing, and analyzing the data to determine its contents, scope, and authenticity. It said no material impact had been found in business operations or financial reporting systems.

    Activeprnewswire.com
  2. Sep 9, 2026

    Cyber Daily reported that The Gentlemen claimed a separate attack on Sharp Office. Sharp Office confirmed it was investigating an incident.

    Activecyberdaily.au
  3. Sep 2, 2026

    The law firm Edelson Lechtzin LLP announced it is investigating claims on behalf of people affected by the Nutex Health breach, separate from the proposed class action already filed on August 27.

    Activerttnews.com
  4. Sep 1, 2026

    The ransomware group The Gentlemen added Nutex Health to its dark web leak site and claimed responsibility for the attack, offering no evidence. Nutex has not identified the intruders. Nutex also reclassified its SEC disclosure from a general Item 8.01 filing to Item 1.05, the category for material cybersecurity incidents.

    Activetheregister.com
  5. Aug 31, 2026

    Nutex Health said the data thief threatened to publish stolen patient, employee, provider, business, and financial information. It said containment and the investigation remain underway, with no material impact found in business operations or systems used for financial reports.

    Activesec.gov
  6. Aug 27, 2026

    A proposed class action was filed against Nutex Health on behalf of people whose personal or health information was allegedly accessed or taken.

    Emergingsec.gov
  7. Aug 26, 2026

    Nutex Health told investors in its SEC disclosure that it does not currently expect the breach to have a material impact on its financial results, while the forensic investigation continues.

    Emergingtechtimes.com
  8. Aug 25, 2026

    SecurityWeek reported the company confirmed data was accessed and exfiltrated, with an investigation ongoing.

    Emergingsecurityweek.com
  9. Aug 24, 2026

    Nutex Health filed an SEC Form 8-K disclosing unauthorized activity on its computer network.

    Emergingcybersecuritynews.com

Sources

Related reports