{
  "id": 5295570,
  "title": "Nutex discloses theft of patient data after breach",
  "url": "https://urgent.news/2026/09/03/nutex-discloses-theft-of-patient-data-after-breach",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-03T08:26:30.000Z",
  "source": {
    "name": "Arabian Post",
    "slug": "arabian-post",
    "url": "https://thearabianpost.com/nutex-discloses-theft-of-patient-data-after-breach/"
  },
  "original_language": "en",
  "account": "Nutex Health disclosed on August 31 that an unauthorized third party had stolen sensitive patient, employee, provider, business, and financial data from its computer network. The Houston-based healthcare provider upgraded its earlier notification of the intrusion to a report under the SEC's category for material cybersecurity incidents. The company's investigation is ongoing, and they are still assessing the full extent of the compromised information. Nutex has not disclosed the number of affected individuals, the volume of data stolen, or the specific types of patient information involved. They have also not identified the intruder or any ransom demands. The Gentlemen, a ransomware group, claimed responsibility for the attack on its leak site, but this has not been independently verified. Nutex engaged an independent cybersecurity response team and forensic specialists after detecting the unauthorized activity and has since activated its response plan and implemented containment measures. The SEC requires publicly traded companies to report cybersecurity incidents within four business days of determining materiality, and Nutex is fulfilling this obligation. The incident has led to a proposed class action lawsuit, Haley v. Nutex Health, Inc., alleging negligence, breach of contract, and unjust enrichment. Nutex has not provided details on how the attackers gained access or whether patient care services were disrupted.",
  "summary": "Nutex Health has confirmed that an unauthorised third party stole sensitive patient, employee, provider, business and financial information from its computer network and threatened to publish the data externally. The Houston-based healthcare provider disclosed the findings in an August 31 filing with the US Securities and Exchange Commission, upgrading its earlier notification of the intrusion to…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}