Nutex Health, a for-profit healthcare company running 28 emergency room facilities and hospitals across 12 US states, has disclosed that attackers broke into its systems and exfiltrated data. The company — whose facilities include locations such as Bayou City ER & Hospital in Texas and Green Bay ER & Hospital in Wisconsin — reported the breach to the US Securities and Exchange Commission (SEC), noting that the stolen information “may be private and/or confidential.”
Nutex detected the intrusion, hired external incident-response and forensic specialists, activated its cybersecurity response plan, implemented containment measures, and notified law enforcement. As of August 24, the investigation is still in its early stages, and the company has not yet determined exactly what type of data was taken or who was affected. The SEC filing states the company is still evaluating whether patient records, employee information, provider credentials, financial data, or intellectual property were accessed or stolen. No threat actor has publicly claimed responsibility for the attack, and Nutex says it found no material impact on its day-to-day operations or financial reporting systems so far.