Nutex Health tells the SEC it believes an unauthorised third party accessed and exfiltrated patient, employee and financial data from its servers
Nutex Health Inc. told the US SEC in an 8-K dated 31 August 2026 that it believes an unauthorised third party accessed and exfiltrated information from its servers, including patient, employee, credentialed-provider, business and financial data that is private or confidential.
A third party has threatened to post that information. The Houston company says it has not identified a material impact on operations or financial reporting systems to date, and it has not named the actor. After an earlier 24 August 8-K, a purported Texas class action (Haley v. Nutex Health, Inc., S.D. Tex.) was filed on 27 August 2026.
According to The Record from Recorded Future News (1 September), a group calling itself the Gentlemen claimed responsibility for the attack. (source: The Record)
No Australia link is reported.
Correction (27 Oct 2026): the gang's claim is now credited to The Record; the SecurityWeek link and the details only it gave (an alias for the gang and a leak-site deadline) have been removed, and a duplicate link to the same 8-K has been dropped. (source: The Record)
Correction (05 Nov 2026): removed the ransomware gang's claim from the title and cut it to one credited sentence; the card now says Nutex believes the data was accessed and exfiltrated, as its 8-K states. (sources: Nutex Health Form 8-K; The Record)
- Product
- Nutex Health Inc.
- Exploited in Australia?
- unknown
