.png)
Mon Health System Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Monongalia Health System, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Monongalia Health System, Inc.
Monongalia Health System, Inc. (often referred to as Mon Health System or MHS) is a hospital and healthcare organization based in Morgantown, West Virginia. Established in 1943, the system serves as the parent company for several healthcare facilities in the region, including Mon Health Medical Center, Mon Health Preston Memorial Hospital, Mon Health Stonewall Jackson Memorial Hospital, and Mon Health Marion Neighborhood Hospital.
MHS employs hundreds of people and provides a range of medical services, such as cardiology, surgery, neurology, oncology, and behavioral health. The system’s mission is to enhance the health of the communities it serves, one person at a time. Mon Health System is part of Vandalia Health and operates multiple affiliates and specialty care centers throughout North Central West Virginia and the surrounding areas.
What Happened?
On March 3, 2025, Monongalia Health System discovered a data security incident involving a phishing attack on a small number of employee email accounts. This breach resulted in unauthorized access to certain documents containing sensitive personal information. The incident was reported to the U.S. Department of Health and Human Services on May 3, 2025.
According to the company, approximately 4,895 individuals in the United States may have been affected.
Types of consumer information exposed:
- Name
- Physician name
- Facility name
- Medical information
- Social Security numbers
- Health insurance policy numbers
The company has stated that its main Electronic Medical System was not accessed during the breach. While there is currently no evidence that the exposed information has been misused, Mon Health System has notified affected individuals and is offering identity protection services at no cost.
Your Rights and Next Steps
If you received a notification from Monongalia Health System about this incident, it is important to understand your rights and take proactive steps to protect your information. You have the right to:
- Obtain a free copy of your credit report from each of the three major credit reporting agencies.
- Place a fraud alert on your credit file, which instructs creditors to take extra steps to verify your identity before opening new accounts. This can be done with Equifax, Experian, or TransUnion.
- Place a security freeze on your credit report, which prevents new credit, loans, and services from being approved in your name without your consent. This is free and can be requested from each credit bureau.
- Take advantage of the free identity protection services offered by Mon Health System to monitor your credit and protect against identity theft.
If you believe your Social Security number or health insurance policy number was exposed, it is especially important to act quickly. Monitor your financial accounts, insurance statements, and credit reports for any signs of suspicious activity. If you notice anything unusual, report it to the appropriate agencies immediately.
You May Be Entitled to Compensation
Lawyers are ready to help individuals affected by the Monongalia Health System data breach. If your information was exposed, you may be eligible to join a class action lawsuit and seek compensation for any harm or inconvenience you have experienced. Even if you have not noticed any misuse of your information yet, you could still qualify for relief.
To find out if you are eligible and to take the next step, complete the below form to join the lawsuit investigation.
.svg)