Incident BriefingsNacogdoches Memorial Hospital network data incident

Nacogdoches Memorial Hospital network data incident

A cyberattack in which an unauthorized party compromised the hospital's computer network and information systems. Potential unauthorized access to patient demographic, identifier, and health-plan information.

Last modified

Summary

  • Environment: Hospital whose computer network, information systems, and patient information were involved.
  • Operational impact: No outage or recovery duration quantified
  • Financial impact: No public cost estimate
  • Record status: Developing record. Reviewed August 9, 2026; updated as evidence emerges.

What happened

An unauthorized party compromised Nacogdoches Memorial Hospital’s computer network and information systems. [2]

Impact

Potential unauthorized access to patient demographic, identifier, and health-plan information. [2][3]

Documented data types include:

  • Patient account numbers — The notice lists medical-record and medical-account numbers. [2]
  • Names [2]
  • Health insurance information — The notice lists health-plan beneficiary numbers. [2]
  • Photographic images — Possible photograph image, if one was taken; the notice does not characterize the image as a biometric identifier. [2]
  • Social Security numbers [2]
  • Contact information — The notice lists addresses, phone numbers, and email addresses. [2]
  • Dates of birth [2]

Timeline

  1. Discovery

    Date NMH says it became aware of the cyberattack.

    [1]

  2. Documented event

    Date on NMH’s public substitute notice, which says letters had been sent to potentially affected patients.

    [2]

  3. Briefing updated

    This briefing was last reviewed and updated on August 9, 2026.

Threat Group & Attack Vector

NMH said an unauthorized party compromised its computer network and information systems and may have accessed patient information; the notice reviewed does not identify the actor or access method. [2]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

As of its March 31 notice, NMH said it was not aware of misuse of anyone’s information resulting from the incident. NMH said it notified law enforcement, activated its incident-response plan, resecured and strengthened the network, added awareness training, and updated procedures. The evidence ledger retains 1 disputed claim with the original citations rather than silently resolving the conflict. No access path, attribution, scale, or recovery detail is inferred beyond the cited claims. [2]