2026 Nacogdoches Memorial Hospital — ~257K individuals (network intrusion; PHI/PII)
Data compromised
Names, addresses, phones, emails, SSNs, DOB, medical record numbers, account numbers, health plan beneficiary numbers, photographs
Technical writeup
Nacogdoches Memorial Hospital (NMH), a Texas acute care hospital, disclosed a data breach after reporting that a threat actor gained unauthorized access to its internal network and information systems, with public timelines centering discovery around January 31, 2026. Regulatory summaries (e.g., Maine Attorney General filings cited in trade reporting) listed approximately 257,073 affected individuals. Data categories described in public materials included names, addresses, phones, emails, Social Security numbers, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and photographs. The hospital described resecuring its network, notifying law enforcement, and encouraging affected individuals to monitor accounts; attribution to a named ransomware group was not confirmed in early reporting.
Root cause
Unauthorized access to hospital network and information systems (method not publicly detailed)