Mon Health Data Breach Exposes Protected Health Info of 2,173 Patients

Monongalia County General Hospital Co., a nonprofit hospital operating as Mon Health Medical Center in Morgantown, West Virginia, disclosed a data breach that affected a total of 2,173 individuals in the United States.

On May 6, 2026, Mon General discovered that a number of its internal email users had been targeted in the phishing attack. The hospital began investigating the security incident with the assistance of a respected forensic security provider.

The investigation ran from early May through late June 2026, ultimately determining that an unauthorized party gained access to certain Mon General email mailboxes on May 6, 2026. The hospital confirmed that no other Mon General systems or data storage were impacted by the incident.

The types of information that may have been exposed varied from person to person but included first and last name, date of birth, email address, phone number, Social Security number, health information and health insurance information.

The breach was disclosed to the U.S. Department of Health and Human Services on July 31, 2026. The hospital posted a notice about the incident on its website%2520-%2520Substitute%2520Notice%2520(for%2520website).docx&wdOrigin=BROWSELINK) and is mailing notification letters to individuals who may have been affected.

Mon General's response to the breach

The hospital is offering affected individuals two years of free credit monitoring services. Instructions for enrolling in this protection are included in the notification letters being mailed to individuals whose information may have been compromised.

Mon General also encouraged individuals to remain vigilant and to continue reviewing their account statements for any unusual activity.

For individuals who have questions or concerns about the incident or who want to learn more about the protections being offered, Mon General has set up a dedicated toll-free phone line. Affected individuals can reach the support team by calling 844-958-8936, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.