Nutex Health Says Patient Data Stolen, Hackers Threaten Leak
The Gentlemen ransomware gang claims breach of US healthcare provider Nutex Health, exfiltrating patient and employee data and threatening publication.
Nutex Health disclosed in an SEC 8-K filing that an unauthorized third party accessed and exfiltrated patient, employee, credentialed provider, business, and financial data from company servers, and threatened to publish it. The Gentlemen ransomware group listed Nutex on its leak site; a class action was filed August 27 and Edelson Lechtzin LLP is separately investigating. Nutex operates over 27 facilities in 12 states and served nearly 100,000 patients in the first half of 2026, with no material operational impact identified so far.
- 8-K filed August 31; earlier unauthorized activity was disclosed to the SEC on August 24.
- The Gentlemen RaaS, first observed mid-2025, has surged in 2026 amid rapid affiliate growth.
- Healthcare is the group's second-most targeted sector at 9% of victims, per Sophos analysis.
- Affiliates typically gain initial access by exploiting firewall vulnerabilities and abusing VPN services.
- Separately, McKesson confirmed a breach possibly affecting 284 million records, claimed by ShinyHunters.
- Vendors
- McKesson
- Threat actors
- The GentlemenShinyHunters
- Victims
- Nutex HealthMcKesson
- Countries
- United States
From the original article
2 min read at infosecurity-magazine.com
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.