Grafton City Hospital Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Grafton City Hospital Inc. data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Grafton City Hospital

Grafton City Hospital Inc. is a nonprofit hospital located in Grafton, West Virginia.

The organization has been serving the Taylor County community and surrounding areas since 1915. As a general medical and surgical hospital, it provides inpatient care, outpatient services and operates a 25-bed acute care floor.

What Happened?

On May 6, 2026, Grafton City Hospital Inc., which operates under Monongalia County General Hospital Company, discovered a data breach resulting from a phishing attack.

A number of employee email accounts were compromised, allowing an unauthorized party to access certain email mailboxes. The hospital terminated the unauthorized access on the same day and launched an investigation with the help of a forensic security provider.

The investigation concluded in late June 2026 and confirmed that no other systems or data storage were impacted. The breach was reported to the U.S. Department of Health and Human Services on Aug. 22, 2026. In total, 1,215 people in the United States were affected.

Information Exposed:

• First and last names
• Dates of birth
• Email addresses
• Phone numbers
• Social Security numbers
• Health information
• Health insurance information

You May Be Entitled to Compensation

If your personal or medical information was exposed in the Grafton City Hospital Inc. data breach, you may be eligible for compensation. Lawyers are investigating potential claims on behalf of affected individuals.

Completing the below form is the first step to joining a lawsuit and protecting your rights.

Sources

• U.S. Department of Health and Human Services
• Grafton City Hospital Notice of Data Breach%20-%20Substitute%20Notice%20(for%20website).docx)