Nutex Health told the SEC on August 31 that the cyberattack disclosed a week earlier cost it patient, employee, and external provider data along with confidential financial information, and that the attackers have threatened to publish the files.
The Houston company, which runs hospitals and outpatient clinics across 12 states, booked $427.2M in first-half revenue. Its initial August 24 filing said only that it had hired cybersecurity experts to respond to an intrusion.
The Gentlemen, a ransomware-as-a-service outfit that researchers say grew from a disgruntled former Qilin affiliate and has claimed at least 350 attacks since September 2025, added Nutex to its leak site the same day. The group was behind the August disruption at AnMed that forced dozens of facility closures.
The filing also notes a proposed class action filed in Texas over the alleged access to patient information, and Nutex said it cannot estimate the incident’s impact on operations or results. It did not name the attackers.
