Houston-based Nutex Health says the hackers behind its August cyberattack have published the data they allegedly stole on their own website.
The publicly traded microhospital operator is now downloading, processing and analyzing that data to determine its contents, scope and authenticity, according to a Sept. 10 SEC filing. Nutex said the review could take several weeks given the volume of data involved.
Nutex first disclosed the cybersecurity event in an Aug. 24 Form 8-K, then updated it Aug. 31. The company engaged a third-party cybersecurity response team and forensic experts, activated its response plan, put containment measures in place and notified law enforcement.
Nutex said it has not identified any material impact on its business operations or financial reporting systems, and its materiality assessment from the Aug. 31 filing remains unchanged. The company said it continues to evaluate regulatory and legal notification requirements and intends to notify affected patients and employees.
Several purported class action lawsuits have been filed against Nutex in the U.S. District Court for the Southern District of Texas’ Houston Division on behalf of individuals whose personal or health information was allegedly accessed. Nutex said it cannot predict the litigation’s outcome or its potential financial impact.
Nutex Health operates 28 microhospitals, specialty hospitals, and hospital outpatient departments across 12 states as part of a physician-led network that also includes population health management and real estate divisions.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
