Nutex Health Inc. filed a Form 8-K with the SEC on August 24, 2026, disclosing that unauthorized activity was detected on the company's computer network, resulting in the possible access and exfiltration of private and confidential information.

Key Highlights

  • Unauthorized access confirmed: The company disclosed that "certain information maintained on the Company's servers was accessed and exfiltrated by an unauthorized third party."
  • Response initiated: Nutex Health engaged an independent third-party cybersecurity response team and forensic experts, activated a cybersecurity response plan, implemented containment measures, and notified law enforcement.
  • No material operational impact identified: As of the filing date, the company reported it "has not identified any material impact on its business operations or financial reporting systems."
  • Scope under investigation: The company is continuing to assess whether patient, employee, credentialed provider, confidential business and financial information, intellectual property, or other information was accessed or exfiltrated.
  • Regulatory notifications pending: The company stated it "intends to make all required notifications based on its findings, including to impacted patients, if applicable."

Nutex Health Cybersecurity Incident: What the Filing Reveals

Nutex Health Inc. (NASDAQ:NUTX), a Delaware-incorporated company headquartered in Houston, Texas, disclosed via an Item 8.01 Other Events filing on August 24, 2026, that it "recently learned of unauthorized activity involving data stored on its computer network." According to the filing, the company responded by engaging external cybersecurity and forensic experts, activating its cybersecurity response plan, implementing containment measures, and alerting law enforcement.

Based on preliminary findings, the company disclosed its belief that data was accessed and exfiltrated by an unauthorized third party. The filing noted that this information "may be private and/or confidential." The investigation remains ongoing, and the company stated it is continuing to evaluate the potential scope of the breach, which may include patient, employee, credentialed provider, business, financial, and intellectual property information. The company reported that as of the filing date it "does not believe that the unauthorized access has had, or is reasonably likely to have, a material impact on the Company's business strategy, operations, financial condition or results of operations."

The filing noted that the company is evaluating applicable regulatory and legal notification requirements and intends to fulfill all required notifications. The filing also contains forward-looking statements regarding the incident and its remediation, which the company cautioned "are not guarantees of future events or outcomes" and are subject to risks and uncertainties described in the company's prior regulatory filings, including its most recent Annual Report on Form 10-K and Quarterly Reports on Form 10-Q for the periods ended March 31, 2026, and June 30, 2026. The filing was signed by Jon C. Bates, Chief Financial Officer.

What Was Disclosed

Nutex Health disclosed a cybersecurity incident involving unauthorized access to and exfiltration of data from its computer network. The company reported no identified material operational impact as of the filing date and said its investigation is ongoing.