Nacogdoches Memorial Hospital Discloses Data Breach Impacting Over 257,000

Got story updates? Submit your updates here. ›

Nacogdoches Memorial Hospital, an independent health system in Texas, has disclosed a data breach that occurred on January 31, 2026, exposing the personal information of over 257,000 patients. The breach included names, addresses, phone numbers, email addresses, Social Security numbers, dates of birth, medical record numbers, account numbers, health plan information, and possible full-face photographs.

Why it matters

Data breaches at healthcare facilities can have serious consequences for patients, including identity theft and financial fraud. This incident at Nacogdoches Memorial Hospital highlights the ongoing cybersecurity challenges facing the healthcare industry and the need for robust data protection measures to safeguard sensitive patient information.

The details

According to the hospital's notification, the data breach occurred on January 31, 2026, when Nacogdoches Memorial staff became aware of an ongoing cyberattack. The exposed information included names, addresses, phone numbers, email addresses, Social Security numbers, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and possible full-face photographs.

• The data breach occurred on January 31, 2026.
• Nacogdoches Memorial Hospital notified patients of the breach in April 2026.

What’s next

The hospital has not yet reported the incident to the Department of Health and Human Services' public breach tool, so the full scope of the breach may not be known for some time.