teiss – News – The Gentlemen claims Nutex Health cyber attack as company faces lawsuit | #ransomware | #cybercrime

The Gentlemen ransomware group claims it breached Nutex Health’s internal network and stole confidential data.

Last month, in a filing with the U.S. Securities and Exchange Commission (SEC), healthcare management and operations company Nutex Health said that it detected unauthorised access to a portion of its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident.

It also activated its incident response and business continuity protocols and notified law enforcement authorities about the incident.

Nutex said that it is still investigating whether sensitive records—including patient, employee, provider, and financial data—were stolen, but confirmed the security incident has not disrupted its daily business operations or financial systems.

Nutex Health confirmed in a separate SEC filing that an unauthorised party breached its servers and exfiltrated confidential files containing sensitive patient, employee, provider, and financial records. The threat actor subsequently demanded a ransom and threatened to leak the stolen data publicly if the demands were not met.

Despite confirming the data exfiltration and ongoing extortion threats, the healthcare management company stated that its investigation has not yet identified any material disruptions to its daily business operations, internal administrative processes, or financial reporting systems.

Although Nutex Health did not name the attackers in its public filings, the Gentlemen ransomware group claimed responsibility and listed the company as a victim on its data leak site.

The Gentlemen is an aggressive, rapidly growing ransomware-as-a-service (RaaS) syndicate active since mid-2025. Operating on a double-extortion model, the group exfiltrates confidential corporate data before deploying custom, cross-platform encryptors to lock down victim systems.

Following the initial SEC filing, a class-action lawsuit (Haley v. Nutex Health, Inc.) was filed against the company on August 27, in the U.S. District Court for the Southern District of Texas on behalf of individuals whose personal or health data was allegedly compromised. The lawsuit alleges negligence, breach of contract, and unjust enrichment, seeking compensatory damages, injunctive relief, credit monitoring services, and legal fees.

“At this stage, the Company is unable to predict the outcome of the litigation or estimate the potential impact of the incident on the Company’s business strategy, operations, financial condition, results of operations or the trading price of the Company’s common stock,” Nutex Health added.