Nacogdoches Memorial Hospital Hit by Cyberattack, Exposing Data of Over 257,000 Patients
Nacogdoches Memorial Hospital, a governmental healthcare provider in Nacogdoches, Texas, disclosed a data breach stemming from a cyberattack detected on January 31, 2026. The incident involved unauthorized access to the hospital’s computer network, compromising sensitive patient information.
Following the discovery, the hospital engaged law enforcement, launched an internal investigation, and strengthened its cybersecurity measures. The review confirmed that an unauthorized party accessed personal and medical data, prompting notification letters to affected individuals on March 31, 2026.
A total of 257,073 people across the U.S. including five in Maine were impacted. Exposed data includes:
- Names, addresses, phone numbers, and email addresses
- Social Security numbers and dates of birth
- Medical record and account numbers
- Health plan beneficiary numbers
- Full-face photographs (where applicable)
The law firm Shamis & Gentile P.A. is investigating potential legal action for those affected, citing possible compensation for damages resulting from the breach. The hospital has since completed its investigation and implemented additional security protocols.
Source: https://www.claimdepot.com/investigations/nacogdoches-memorial-hospital-data-breach-2026
Nacogdoches Memorial Hospital cybersecurity rating report: https://www.rankiteo.com/company/nacogdoches-memorial-hospital
"id": "NAC1775054288",
"linkid": "nacogdoches-memorial-hospital",
"type": "Cyber Attack",
"date": "1/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '257073',
'industry': 'Healthcare',
'location': 'Nacogdoches, Texas, USA',
'name': 'Nacogdoches Memorial Hospital',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Notification letters sent to affected individuals',
'data_breach': {'number_of_records_exposed': '257073',
'personally_identifiable_information': ['Names',
'Addresses',
'Phone numbers',
'Email addresses',
'Social Security '
'numbers',
'Dates of birth',
'Medical record '
'numbers',
'Account numbers',
'Health plan '
'beneficiary numbers',
'Full-face '
'photographs'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Medical Data']},
'date_detected': '2026-01-31',
'date_publicly_disclosed': '2026-03-31',
'description': 'Nacogdoches Memorial Hospital, a governmental healthcare '
'provider in Nacogdoches, Texas, disclosed a data breach '
'stemming from a cyberattack detected on January 31, 2026. The '
'incident involved unauthorized access to the hospital’s '
'computer network, compromising sensitive patient information.',
'impact': {'data_compromised': 'Sensitive patient information including '
'personal and medical data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal action being investigated by '
'Shamis & Gentile P.A.',
'systems_affected': 'Hospital’s computer network'},
'investigation_status': 'Completed',
'post_incident_analysis': {'corrective_actions': 'Implemented additional '
'security protocols'},
'references': [{'source': 'Incident Disclosure'}],
'regulatory_compliance': {'legal_actions': 'Potential legal action being '
'investigated'},
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'remediation_measures': 'Strengthened cybersecurity measures'},
'title': 'Nacogdoches Memorial Hospital Cyberattack and Data Breach',
'type': 'Data Breach'}