2026 Mon General Hospital — phishing email accounts; patient PHI/SSNs (count TBD)
Data compromised
Names, DOBs, emails, phones, SSNs, and health/health insurance information (varied by person); investigation found no other hospital systems impacted
Technical writeup
Verified hospital notice — WDTV July 31 / DataBreaches Aug 1, 2026. Monongalia County General Hospital Company (Mon General) disclosed a phishing incident discovered May 6 targeting a small number of email accounts; unauthorized access terminated the same day with forensic help. Investigation concluded late June: no other data storage or hospital systems impacted. Potentially compromised data varies but may include names, DOBs, emails, phones, SSNs, and health/insurance information. Patient census not published; recordsAffected 0.
Root cause
Phishing attack targeting a small number of email accounts discovered May 6, 2026; unauthorized mailbox access terminated same day