Houston-based Nutex Health has disclosed that an unauthorized third party accessed and exfiltrated data from its computer network.
The publicly traded microhospital operator said it recently detected the unauthorized activity and has engaged an independent third-party cybersecurity response team and forensic experts, according to an Aug. 24 SEC filing. The company activated its cybersecurity response plan, implemented containment measures and notified law enforcement.
The company is still determining what data was compromised. Nutex said it continues to assess whether patient, employee, credentialed provider, confidential business and financial information, or intellectual property was accessed or acquired.
As of the filing date, Nutex said it has not identified any material impact on its business operations or financial reporting systems. The company said it is evaluating regulatory and legal notification requirements and intends to notify affected patients if applicable.
Nutex Health operates 28 microhospitals and hospital outpatient departments across 12 states.
