CHARLESTON AREA MEDICAL CENTER, INC.

Charleston Area Medical Center notified Vermont AG of a phishing incident discovered Oct 2, 2024. An unauthorized party accessed a single user's email mailbox between Oct 2-3, 2024. Impacted data included names, DOB, driver's license, health info, and insurance info. CAMC engaged forensic experts, provided phishing training, enhanced safeguards, and offered 24 months of identity theft protection.

Charleston Area Medical Center (WV) reported to HHS on 2025-02-14 a Hacking/IT Incident (email phishing) affecting 67,413 individuals. An employee was the subject of a phishing attack that compromised PHI stored in Email systems. Exposed data included names, Social Security numbers, driver's license numbers, birthdates, addresses, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, and responded with additional administrative and technical safeguards and employee retraining.

Charleston Area Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-02 and was reported on 2025-02-14. 35 Indiana residents were affected. 67,413 individuals affected in total.

Charleston Area Medical Center, Inc. reported to HHS on 2022-03-28 a Hacking/IT Incident affecting 54,000 individuals. Breached information located on Email. Employees were victims of a phishing attack exposing PHI including names, DOB, MRNs, SSNs, and financial info. CE provided credit monitoring and implemented technical safeguards.