Mon General Hospital notifies patients of phishing attack, potential data breach
MORGANTOWN, W.Va (WDTV) – Monongalia County General Hospital Company, known as Mon General, announced it was recently the victim of a phishing attack that may have compromised the personal and medical information of some patients.
Hospital officials say the incident was discovered on May 6, when they identified that a phishing attack had targeted a small number of email accounts.
The hospital immediately launched an investigation with the assistance of a forensic security provider and terminated unauthorized access to the affected mailboxes on the same day.
The hospital’s investigation, which concluded in late June 2026, confirmed that the breach impacted no other data storage or hospital systems.
While the scope of impacted information varies by individual, potentially compromised details include first and last names, dates of birth, email addresses, phone numbers, Social Security numbers, and health or health insurance information.
In response to the incident, Mon General worked alongside external cybersecurity experts to secure its systems, terminate unauthorized access, and reset user credentials. The hospital is currently evaluating additional technical safeguards to prevent future incidents.
Mon General is mailing notification letters to individuals whose information may have been compromised. Impacted patients are eligible to sign up for two years of free credit monitoring, with sign-up instructions included in their letters.
The hospital also encourages patients to remain vigilant and routinely review their account statements and credit reports for any unusual or suspicious activity.
Anyone with questions or concerns regarding the incident can contact Mon General’s toll-free helpline at (844) 958-8936. The hotline is available Monday through Friday, from 8:00 a.m. to 5:30 p.m.
Copyright 2026 WDTV. All rights reserved.
