NUTEX HEALTH PROVIDES UPDATE REGARDING CYBERSECURITY EVENT
Nutex Health says data tied to its prior cybersecurity incident was posted online, but reports no material operational or financial system impact to date.
Rhea-AI Summary
Nutex Health (NUTX) reports that a third party has published data allegedly obtained in its previously disclosed cybersecurity incident.
The company and its external cybersecurity experts are downloading, processing and analyzing the posted data to determine its contents, scope and authenticity, a process expected to take several weeks due to the data volume. Nutex Health states that so far it has not identified any material impact on business operations or financial reporting systems, and its assessment of the incident's materiality remains unchanged from its August 31, 2026 Form 8-K. The company is evaluating regulatory and legal notification requirements, plans to notify affected patients and employees as required, and notes that several purported class action complaints related to the incident have been filed in federal court.
Positive
- No material impact identified on business operations or financial reporting systems to date
- Company’s materiality assessment unchanged from August 31, 2026 Form 8-K
- Engagement of independent cybersecurity and forensic experts and law enforcement involvement
Negative
- Unauthorized third party has published allegedly obtained data online
- Data review expected to take several weeks due to volume
- Several purported class action complaints filed related to the incident
- Company cannot estimate potential impact on strategy, operations, financial condition or stock price
News Explained
Nutex Health's data review remains incomplete, and it says it cannot yet predict the outcome of the related litigation or estimate effects on strategy, operations, finances, results, or common-stock trading; those consequences therefore remain unresolved.
Key Terms
form 8-k regulatory
personally identifiable information regulatory
protected health information medical
AI-generated analysis. How Rhea-AI works. Not financial advice.
As disclosed in Item 8.01 of the Current Report on Form 8-K filed with the Securities and Exchange Commission (the "SEC") on August 24, 2026 (the "Initial Disclosure"), as updated in Item 1.05 of the Form 8-K filed with the SEC on August 31, 2026 (the "August 31, 2026 8-K"), Nutex Health Inc. became aware of unauthorized activity involving data stored on its computer network. The Company engaged an independent third-party cybersecurity response team and forensic experts, activated a cybersecurity response plan, implemented containment measures and notified law enforcement.
The Company is providing this update to inform stakeholders that it has learned that the unauthorized third party has published on its website the data that was allegedly obtained in connection with the previously disclosed cybersecurity event. The Company, together with its cybersecurity experts and advisors, is in the process of downloading, processing and analyzing the data to determine its contents, scope, and authenticity. Due to the volume of data involved, the Company expects this process and review to take several weeks.
To date, the Company has not identified any material impact of the event on its business operations or financial reporting systems.
Based on the information currently available, the Company's assessment of the materiality of this event, as set forth in the August 31, 2026 8-K, has not changed. The Company will continue to evaluate the impact of this development as additional information becomes available through its ongoing analysis, and will provide further updates as warranted, including any required amendments to its prior disclosures.
The Company continues to evaluate applicable regulatory and legal notification requirements, and the Company intends to make all required notifications based on its findings, including to impacted patients and employees.
Following the Initial Disclosure, several purported class action complaints were filed against the Company in the United States District Court for the Southern District of
At this stage, the Company is unable to predict the outcome of the litigation or estimate the potential impact of the incident on the Company's business strategy, operations, financial condition, results of operations or the trading price of the Company's common stock.
About Nutex Health Inc.
Headquartered in Houston, Texas and founded in 2011, Nutex Health Inc. (NASDAQ: NUTX) is a healthcare management and operations company with three divisions: a Hospital Division, Population Health Management Division, and Real Estate Division
The Hospital Division owns, develops, and operates innovative health care models, including micro-hospitals, specialty hospitals, and hospital outpatient departments. This division owns and operates 28 facilities in 12 states.
The Population Health Management division owns and operates provider networks such as Independent Physician Associations. Through our Management Services Organization, we provide management, administrative and other support services to our affiliated hospitals and physician groups.
The Real Estate division comprises of real estate entities along with activity related to the development and construction of hospital facilities. The real estate entities own the land and hospital buildings which are leased to our hospital entities.
Forward-Looking Statements
Certain statements and information included in this press release constitute "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. When used in this press release, the words or phrases "will," "will likely result," "expected to," "will continue," "anticipated," "estimate," "projected," "intend," "goal," or similar expressions are intended to identify "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. Such statements are subject to certain risks, known and unknown, and uncertainties, many of which are beyond the control of the Company. Such uncertainties and risks include, but are not limited to, regulatory and litigation uncertainty under the No Surprises Act, lawsuits filed by health insurance providers against our third party provider in the arbitration process, sales of a substantial amount of our Common Stock by our stockholders, our obligation to issue additional shares of our common stock to former doctor owners of under construction hospitals, manipulative short seller reports, the impact of litigation and disputes, our ability to successfully execute our growth strategy, economic conditions, dependence on management, lack of capital, the effects of rapid growth upon the Company and the ability of management to effectively respond to the growth and demand for products and services of the Company, newly developing technologies, the Company's ability to compete, conflicts of interest in related party transactions, regulatory matters, protection of technology, lack of industry standards, the effects of competition and the ability of the Company to obtain future financing. An extensive list of factors that can affect future results are discussed in the Annual Report on Form 10-K for the year ended December 31, 2025 and subsequent Quarterly Reports on Form 10-Q for the three months ended March 31, 2026 and the six months ended June 30, 2026, under the heading "Risk Factors" in Part II, Item IA thereof, and the risk factors and other cautionary statements contained in our other documents filed from time to time with the Securities and Exchange Commission. Such factors could materially adversely affect the Company's financial performance and could cause the Company's actual results for future periods to differ materially from any opinions or statements expressed within this press release.
View original content:https://www.prnewswire.com/news-releases/nutex-health-provides-update-regarding-cybersecurity-event-302875826.html
SOURCE Nutex Health, Inc.
FAQ
What actions has Nutex Health taken in response to the cybersecurity incident?
Nutex Health activated its cybersecurity response plan, implemented containment measures, engaged an independent third-party cybersecurity response team and forensic experts, and notified law enforcement. The company is currently downloading, processing and analyzing the data posted online to determine its contents, scope and authenticity, and is continuing to evaluate the impact of this development.
How long does Nutex Health expect the data analysis to take?
The company expects that downloading, processing and reviewing the data will take several weeks because of the volume of data involved.
Has Nutex Health identified any impact on its operations or financial systems?
To date, Nutex Health has not identified any material impact of the cybersecurity event on its business operations or financial reporting systems, and its previously disclosed assessment of the event’s materiality has not changed.
How will affected individuals be notified?
The company continues to evaluate applicable regulatory and legal notification requirements and intends to make all required notifications based on its findings, including notifications to impacted patients and employees, if required.
What litigation has arisen from the cybersecurity incident?
Following the initial disclosure of the incident, several purported class action complaints were filed against Nutex Health in the United States District Court for the Southern District of Texas, Houston Division. The company states that it is currently unable to predict the outcome of this litigation or estimate the potential impact of the incident on its business strategy, operations, financial condition, results of operations or the trading price of its common stock.