[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbaqDa8pA0qT0EOgnIV-O7tMsErGNclF-TrtBPNl4u2M":3},{"article":4,"iocs":46,"watch_terms":57,"solutions":58,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"78d6b448-0a8e-4b23-962b-55f5aca27ed2","Ransomware Gang Claims Nutex Health Data Breach","ransomware-gang-claims-nutex-health-data-breach-3297a1","The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek.","Nutex Health has confirmed a data breach after hackers accessed and exfiltrated patient, employee, provider, business, and financial information. The Gentlemen ransomware group has claimed responsibility and threatened to leak the data. The company has notified the SEC and is investigating the scope and impact of the incident, which has also led to a class-action lawsuit.","Ransomware gang claims Nutex Health data breach, threatening to leak patient and financial information.","https:\u002F\u002Fwww.securityweek.com\u002Fransomware-gang-claims-nutex-health-data-breach\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fdata-tracking-report.jpeg","2026-09-01T10:47:47+00:00","2026-09-01T12:00:26.792549+00:00",8,[17,20],{"name":18,"type":19},"Nutex Health","product",{"name":21,"type":22},"The Gentlemen","threat_actor","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":23,"icon":25,"name":26,"slug":27},null,"Ransomware","ransomware",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,51,54],{"type":48,"value":49,"context":50},"domain","gentlemen.onion","The Gentlemen ransomware group added Nutex Health to their Tor leak site.",{"type":52,"value":21,"context":53},"malware","Ransomware group claiming responsibility for the Nutex Health data breach.",{"type":52,"value":55,"context":56},"Storm-2697","Alias for the Gentlemen ransomware group.",[18],{"controls":59,"vendors":144},[60,89,115],{"slug":61,"name":62,"problem":63,"products":64},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":90,"name":91,"problem":92,"products":93},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[94,102,107],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":103,"product_name":104,"url":105,"description":106},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":116,"name":117,"problem":118,"products":119},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":161},"ransomware-breach-exposes-nutex-health-patient-and-financial-data","Ransomware Breach Exposes Nutex Health Patient and Financial Data","The Gentlemen ransomware group successfully exfiltrated sensitive patient, employee, provider, and financial data from Nutex Health, triggering SEC disclosure obligations and a class-action lawsuit. This incident highlights the elevated risk healthcare organizations face as high-value targets due to the sensitivity and regulatory weight of the data they hold. Failure to prevent data exfiltration — not just encryption — is a critical gap, as ransomware groups increasingly use stolen data as a secondary leverage point. The resulting legal and regulatory consequences demonstrate that the cost of a breach extends far beyond immediate remediation.",[150,151,152,153,154,155,156,157,158,159,160],"CIS Control 3 – Data Protection","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 IR-4 – Incident Handling","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SC-7 – Boundary Protection","HIPAA Security Rule 45 CFR § 164.312 – Technical Safeguards","HIPAA Breach Notification Rule 45 CFR § 164.400–414","SEC Cybersecurity Disclosure Rules (17 CFR § 229.106)","NIST Cybersecurity Framework DE.CM-1 – Network Monitoring","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach",{}]