Monongalia Health System, Inc.

Monongalia Health System, Inc. (WV) reported to HHS on 2021-12-21 a Hacking/IT Incident (email phishing attack) affecting 398,164 individuals. Multiple employees were victims of the phishing attack, exposing PHI including names, addresses, Social Security numbers, health insurance and claims information, and treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, implemented additional technical safeguards, and provided complimentary credit monitoring. Breached information located on Email.

Affected (this filing): 398,164

Monongalia Health System, Inc. notified the New Hampshire Attorney General of a phishing incident involving unauthorized access to email accounts between May 10 and August 15, 2021. The attack, discovered in July 2021, was a Business Email Compromise (BEC) scheme attempting fraudulent wire transfers. Patient data (names, MRNs, SSNs, health info) may have been accessed. Approximately 50 individuals were affected, including 12 NH residents. Mon Health secured accounts, notified law enforcement, engaged forensic investigators, and offered credit monitoring.

Affected (this filing): 50