Ransomware Group Claims Data Theft at Nutex Health

Nutex Health reported in a Securities and Exchange Commission filing that hackers gained unauthorized access to its network and exfiltrated files from its servers last week. The Houston-based healthcare services and operations company listed patient, employee, provider, business and financial information among the data taken.

The company said it is investigating the scope, extent and impact of the incident and has notified regulators. A purported class-action complaint was filed in Texas. Nutex reported it has not identified any material impact on its business operations or financial reporting systems to date.

“The third party has threatened to post such information externally. To date, the company has not identified any material impact on its business operations or financial reporting systems,” the SEC filing states.

A ransomware group calling itself The Gentlemen, also tracked as Storm-2697, claimed responsibility and added Nutex to a Tor-based leak site, stating it will publish the stolen data within nine days unless its demands are met.

The Gentlemen operates as a ransomware-as-a-service provider. Under that model, operators supply malware and infrastructure to affiliates who carry out attacks and share proceeds. The group uses a double-extortion method, encrypting systems and stealing files to pressure victims into paying.

Public reporting tied to the group’s activity shows it emerged in mid-2025 and has claimed more than 580 victims in over 75 countries.

Nutex said it is conducting internal and forensic reviews to determine which specific records were taken and which individuals or third parties may be affected. The company did not disclose whether patient medical records were accessed in a way that would trigger additional health privacy notifications beyond the SEC filing.

The SEC filing also noted legal and financial uncertainty tied to the breach, stating the company cannot yet predict the outcome of the litigation or estimate how the incident might affect its business strategy, operations, financial condition, results of operations or the trading price of its common stock.

Nutex said it will provide updates as the investigation progresses and as required by regulators, and it is working to determine appropriate notifications and remediation steps for affected parties.