Healthcare and services provider Nutex is investigating a data breach incident in which an unauthorized third party exfiltrated information from company servers.
The organization disclosed the cyberattack in a filing with the U.S. Securities and Exchange Commission (SEC), noting that the stolen data may contain private or confidential information.
“Based on the preliminary findings of the Company’s ongoing investigation, the Company believes that certain information stored on the Company’s servers was accessed and exfiltrated by an unauthorized third party, including some information that may be private and/or confidential.” Says Nutex.
Nutex Health is a for-profit healthcare company operates 28 facilities in 12 statesincluding Bayou City ER & Hospital in Texas and Green Bay ER & Hospital in Wisconsin.
The company had annual revenue of $875 million in 2025 and a market capitalization of $1.28 billion publicly traded as NUTX on the Nasdaq capital market.
After discovering the breach, the company hired third-party incident response and forensic investigation specialists, activated its cybersecurity response plan, implemented mitigation measures, and notified law enforcement.
Nutex still needs to determine what type of data may have been compromised and whether the impact affected patients, employees or business partners.
“The Company continues to assess whether and to what extent patients, employees, certified providers, confidential business and financial information, intellectual property or other information were accessed, acquired or exfiltrated, and continues to assess the potential impact of the unauthorized activity on the Company, including possible disclosure of private and/or confidential information by third parties,” the SEC filing said.
As of August 24, the company said it had not experienced any material impact on its operations or financial reporting systems, and it does not currently expect the incident to have a material impact on its business strategy, operations, financial condition or results of operations.
BleepingComputer was unable to find any threat actor claiming the attack on Nutex.
We have reached out to Nutex for comment on the incident and will update this post once we receive a response.
Overall prevention scores can hide what happens after the first access. Once attackers use valid credentials, prevention drops sharply.
The 2026 Blue Report measures defense technology for technology in 338 million simulations conducted in customer production environments.
