healthcare data breach2 articles
Gentlemen Ransomware Gang Takes Credit for Nutex Health Breach
Nutex Health has confirmed a data breach in which hackers stole patient, employee, financial, and business information, with the company notifying the SEC and facing a class-action lawsuit in Texas. The Gentlemen ransomware group (also known as Storm-2697) has claimed responsibility, threatening to leak the stolen data within nine days if their demands are not met. The group, which operates as a ransomware-as-a-service and has claimed over 580 victims across 75 countries since emerging in mid-2025, employs double extortion tactics by both encrypting and exfiltrating victim data.
AdaptHealth Blames Social Engineering After Patient Data Walks Out the Door
Medical equipment provider AdaptHealth suffered a cyberattack in which criminals used social engineering to compromise a third-party contractor and gain access to the company's cloud systems. Attackers stole sensitive patient data, including personally identifiable information, protected health information, and a password file linked to insurance billing, though Social Security numbers and payment details are believed to be unaffected. AdaptHealth disclosed the breach to the SEC on June 27, deeming it material due to the potential volume of data at risk, while investigations into the full scope of the incident are ongoing.