Hospital operator Nutex Health says data stolen in cyberattack

[XploitLK-Bot]

Nutex Health, a U.S.-based healthcare and hospital services provider, has confirmed that an unauthorized third party accessed and exfiltrated data from its corporate servers. The company states it is currently investigating the incident, which appears to have involved the theft of sensitive information from its internal systems.

According to its public disclosure, Nutex Health detected unusual activity on its network and has since engaged cybersecurity experts and law enforcement to assist in the response. While the exact scope of the stolen data has not been fully detailed, the company has indicated that the breach may impact patient or employee records. Nutex has said it is working to notify affected individuals and regulatory authorities as required.

Key points from the ongoing investigation:

• The intrusion involved unauthorized access to and exfiltration of data from Nutex Health's servers.
• No specific ransomware group or extortion demand has been publicly attributed at this time.
• Nutex Health operates acute-care hospitals and micro-hospitals across multiple U.S. states.
• The company has not yet released a detailed timeline or a full list of affected data types.

The incident underscores ongoing risks for healthcare providers, which often handle highly sensitive personal and medical data. Those in the sector are advised to monitor for signs of credential abuse or lateral movement in their own environments, and to review their incident response plans for data theft scenarios rather than just encryption-based attacks.

Source: BleepingComputer

Are you monitoring for data exfiltration anomalies in your environment, or are your detection efforts still primarily focused on ransomware encryption?