Nutex Health Investigates Data Breach After Unauthorized Server Access
Nutex Health, a publicly traded healthcare provider operating 28 facilities across 12 U.S. states, is investigating a data breach after an unauthorized third party accessed and exfiltrated information from its servers. The company disclosed the incident in an August 24 filing with the U.S. Securities and Exchange Commission (SEC), confirming that the stolen data may include private or confidential details.
With an annual revenue of $875 million and a market capitalization of $1.28 billion, Nutex operates high-profile facilities such as Bayou City ER & Hospital in Texas and Green Bay ER & Hospital in Wisconsin. Following the detection of the intrusion, the company engaged external incident-response and forensic specialists, activated its cybersecurity response plan, and notified law enforcement. Containment measures have been implemented, but the full scope of the breach remains unclear.
Nutex has not yet determined whether the compromised data includes patient records, employee information, business or financial details, intellectual property, or other sensitive data. The company is continuing its assessment to evaluate the potential impact, including the risk of unauthorized disclosure by the threat actor. As of the filing, Nutex reported no material disruption to its operations or financial reporting systems and does not anticipate a significant effect on its business strategy or financial condition.
No threat actor has publicly claimed responsibility for the attack. Investigations are ongoing.
Nutex Health TPRM report: https://www.rankiteo.com/company/nutex-health-inc
Bayou City ER & Hospital TPRM report: https://www.rankiteo.com/company/nutex-health-inc
"id": "nut1787675757",
"linkid": "nutex-health-inc",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'United States',
'name': 'Nutex Health',
'size': {'annual_revenue': '875000000',
'facilities': '28',
'market_capitalization': '1280000000',
'states_operated': '12'},
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized Server Access',
'data_breach': {'data_exfiltration': 'Yes',
'sensitivity_of_data': 'Private or confidential',
'type_of_data_compromised': ['Patient records',
'Employee information',
'Business or financial details',
'Intellectual property',
'Other sensitive data']},
'date_publicly_disclosed': '2024-08-24',
'description': 'Nutex Health is investigating a data breach after an '
'unauthorized third party accessed and exfiltrated information '
'from its servers. The stolen data may include private or '
'confidential details.',
'impact': {'data_compromised': 'Private or confidential details',
'operational_impact': 'No material disruption to operations or '
'financial reporting systems',
'systems_affected': 'Servers'},
'investigation_status': 'Ongoing',
'references': [{'date_accessed': '2024-08-24',
'source': 'U.S. Securities and Exchange Commission (SEC) '
'filing'}],
'regulatory_compliance': {'regulatory_notifications': 'SEC filing'},
'response': {'containment_measures': 'Implemented',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'third_party_assistance': 'External incident-response and '
'forensic specialists'},
'title': 'Nutex Health Data Breach Investigation',
'type': 'Data Breach'}