---
title: "Nacogdoches Memorial Hospital network data incident"
description: "Evidence-backed account of Nacogdoches Memorial Hospital network data incident, covering what happened, impact, timeline, attack vector, technical details, and primary sources."
incident_type: "Data incident"
status: "active"
last_modified: "2026-08-09"
canonical_url: "https://www.ally.security/incidents/nacogdoches-memorial-hospital-network-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/nacogdoches-memorial-hospital-network-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/nacogdoches-memorial-hospital-network-data-incident-2026/stix.json"
---

# Nacogdoches Memorial Hospital network data incident

A cyberattack in which an unauthorized party compromised the hospital's computer network and information systems. Potential unauthorized access to patient demographic, identifier, and health-plan information.

Last modified Aug 9, 2026 · 3 sources

## Summary

- **Environment:** Hospital whose computer network, information systems, and patient information were involved.
- **Operational impact:** No outage or recovery duration quantified
- **Financial impact:** No public cost estimate

## What happened

An unauthorized party compromised [Nacogdoches Memorial Hospital](https://nacmem.org/)'s computer network and information systems. [2](#source-2)

## Impact

Potential unauthorized access to patient demographic, identifier, and health-plan information. [2](#source-2) [3](#source-3)

Documented data types include:

- Patient account numbers — The notice lists medical-record and medical-account numbers. [2](#source-2)
- Names [2](#source-2)
- Health insurance information — The notice lists health-plan beneficiary numbers. [2](#source-2)
- Photographic images — Possible photograph image, if one was taken; the notice does not characterize the image as a biometric identifier. [2](#source-2)
- Social Security numbers [2](#source-2)
- Contact information — The notice lists addresses, phone numbers, and email addresses. [2](#source-2)
- Dates of birth [2](#source-2)

## Timeline

### January 31, 2026 — Discovery

Date NMH says it became aware of the cyberattack. [1](#source-1)

### March 31, 2026 — Documented event

Date on NMH's public substitute notice, which says letters had been sent to potentially affected patients. [2](#source-2)

### August 9, 2026 — Briefing updated

This briefing was last reviewed and updated on August 9, 2026.

## Threat Group & Attack Vector

NMH said an unauthorized party compromised its computer network and information systems and may have accessed patient information; the notice reviewed does not identify the actor or access method. [2](#source-2)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

As of its March 31 notice, NMH said it was not aware of misuse of anyone's information resulting from the incident. NMH said it notified law enforcement, activated its incident-response plan, resecured and strengthened the network, added awareness training, and updated procedures. The evidence ledger retains 1 disputed claim with the original citations rather than silently resolving the conflict. No access path, attribution, scale, or recovery detail is inferred beyond the cited claims. [2](#source-2)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/nacogdoches-memorial-hospital-network-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Nacogdoches Memorial Hospital homepage security-incident notification

official · Nacogdoches Memorial Hospital

<https://nacmem.org/>

<a id="source-2"></a>

### Nacogdoches Memorial Hospital notifies patients of security incident

official · Nacogdoches Memorial Hospital

<https://nacmem.org/wp-content/uploads/2026/03/Substitute-Notice-Final.docx>

<a id="source-3"></a>

### Breach Portal current investigation table

regulatory · U.S. Department of Health and Human Services Office for Civil Rights

<https://ocrportal.hhs.gov/ocr/breach/breach_report_hip.jsf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: NMH said an unauthorized party compromised its computer network and information systems and may have accessed patient information; the notice reviewed does not identify the actor or access method.
2. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Patient account numbers
3. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Names
4. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Health insurance information
5. **Occurred At · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient notification: 2026-03-31
6. **Resulted In · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient notification: As of its March 31 notice, NMH said it was not aware of misuse of anyone's information resulting from the incident.
7. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Photographic images
8. **Resulted In · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: Nacogdoches Memorial Hospital patient notification
9. **Discovered At · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: 2026-01-31
10. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Social Security numbers
11. **Affected Individual Count · 100% confidence · disputed**  
   Nacogdoches Memorial Hospital patient-information exposure: 2,507,073 individual
12. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Contact information
13. **Resulted In · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: Nacogdoches Memorial Hospital patient-information exposure
14. **Affected Organization · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: Nacogdoches Memorial Hospital
15. **Exposed Data Category · 100% confidence · current**  
   Nacogdoches Memorial Hospital patient-information exposure: Dates of birth
16. **Resulted In · 100% confidence · current**  
   January 2026 Nacogdoches Memorial Hospital network incident: NMH said it notified law enforcement, activated its incident-response plan, resecured and strengthened the network, added awareness training, and updated procedures.

</details>