Hospital operator Nutex Health says data stolen in cyberattack

Nutex Health experienced a cyberattack resulting in unauthorized access and data exfiltration from its servers. The company disclosed the incident in a U.S. SEC filing and is conducting an ongoing investigation to determine the scope and impact of the breach. The stolen data may include private and confidential information concerning patients, employees, credentialed providers, confidential business and financial information, and intellectual property. Nutex has taken containment measures, engaged external cybersecurity specialists, and involved law enforcement. The company has not identified any material operational or financial impact to date and continues to assess the breach's full consequences. No known exploit code or threat actor claims have been reported.

The breach potentially exposes sensitive private and confidential information related to patients, employees, providers, business partners, and intellectual property. While the full scope is still under investigation, such exposure could lead to privacy violations, regulatory scrutiny, and reputational damage. Nutex reports no material impact on its operations or financial condition as of the latest update. The incident may affect stakeholders depending on the nature of the compromised data once fully assessed.

Nutex has already implemented containment measures, activated its cybersecurity response plan, engaged external incident response and forensic specialists, and notified law enforcement. Organizations affected or potentially affected should monitor official communications from Nutex for updates. No specific remediation or patch is applicable as this is a breach incident rather than a software vulnerability. Continued investigation and response efforts are ongoing.