Houston-based Nutex Health says the hackers behind its August cyberattack have published the data they allegedly stole on their own website.
The publicly traded micro-hospital operator is now downloading, processing and analyzing that data to determine its contents, scope and authenticity, according to a Sept. 10 SEC filing. Nutex said the review could take several weeks given the volume of data involved.
Nutex first disclosed the cybersecurity event in an Aug. 24 Form 8-K, then updated it Aug. 31. The company engaged a third-party cybersecurity response team and forensic experts, activated its response plan, put containment measures in place and notified law enforcement.
Nutex said it has not identified any material impact on its business operations or financial reporting systems, and its materiality assessment from the Aug. 31 filing remains unchanged. The company said it continues to evaluate regulatory and legal notification requirements and intends to notify affected patients and employees.
Several purported class action lawsuits have been filed against Nutex in the U.S. District Court for the Southern District of Texas’ Houston Division on behalf of individuals whose personal or health information was allegedly accessed. Nutex said it cannot predict the litigation’s outcome or its potential financial impact.
Nutex Health operates 28 micro-hospitals, specialty hospitals and hospital outpatient departments across 12 states as part of a physician-led network that also includes population health management and real estate divisions.
