Monongalia Health System, Inc.

Monongalia Health System, Inc. notified Montana residents of a phishing attack targeting employee email accounts. The incident, discovered March 3, 2025, may have exposed names and physician/medical facility information. The organization engaged forensic experts, enhanced security measures, and provided 12 months of credit monitoring.

Monongalia Health System, Inc. (WV) reported to HHS OCR on 2025-05-03 an Unauthorized Access/Disclosure breach affecting 4,895 individuals. Breached information was located on Email. No business associate was identified as involved. No further details were provided in the web description.

Monongalia Health System, Inc. reported unauthorized access to its IT network between December 8 and December 19, 2021. The incident was discovered on December 18, 2021. Affected data may include names, addresses, dates of birth, medical record numbers, Social Security numbers, and health insurance information for patients, providers, employees, and contractors. Electronic health records systems were not accessed. The organization took systems offline, reset passwords, and engaged forensic investigators.

Monongalia Health System, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-02-28. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Monongalia Health System, Inc. notified South Carolina AG of a data security incident where unauthorized parties accessed the IT network between Dec 8-19, 2021. The breach may have exposed patient PII, SSNs, and PHI. Mon Health detected unusual activity on Dec 18, 2021, took systems offline, reset passwords, and engaged forensic investigators. No misuse reported to date. Identity monitoring offered.

Monongalia Health System, Inc. reported to HHS on 2022-02-28 a Hacking/IT Incident affecting 492861 individuals. Breached information located on Network Server. The incident involved a ransomware attack exposing PHI including names, addresses, SSNs, and health insurance information.

Monongalia Health System, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-12-08 and was reported on 2022-02-28. 2 Indiana residents were affected. 472,420 individuals affected in total.

Monongalia Health System, Inc. (WV) reported to HHS on 2021-12-21 a Hacking/IT Incident (email phishing attack) affecting 398,164 individuals. Multiple employees were victims of the phishing attack, exposing PHI including names, addresses, Social Security numbers, health insurance and claims information, and treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, implemented additional technical safeguards, and provided complimentary credit monitoring. Breached information located on Email.

Monongalia Health System, Inc. notified the New Hampshire Attorney General of a phishing incident involving unauthorized access to email accounts between May 10 and August 15, 2021. The attack, discovered in July 2021, was a Business Email Compromise (BEC) scheme attempting fraudulent wire transfers. Patient data (names, MRNs, SSNs, health info) may have been accessed. Approximately 50 individuals were affected, including 12 NH residents. Mon Health secured accounts, notified law enforcement, engaged forensic investigators, and offered credit monitoring.

Monongalia Health System, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-21. 41 Massachusetts residents were affected. The report records the breach type as electronic.

MONONGALIA HEALTH SYSTEM INC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-519). The register records the breach as discovered on October 29, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.