Mon General Hospital Reports Phishing Attack, Potential Data Breach Affecting Patients
Mon General Hospital in Morgantown, West Virginia, has announced that it was the target of a phishing attack, potentially compromising the personal and medical information of some patients. The incident was discovered on May 6, when hospital officials identified that a phishing attack had targeted a small number of email accounts. An investigation was immediately launched with the help of a forensic security provider, and unauthorized access to the affected mailboxes was terminated on the same day. The investigation, which concluded in late June 2026, confirmed that no other data storage or hospital systems were impacted. The potentially compromised information includes names, dates of birth, email addresses, phone numbers, Social Security numbers, and health or health insurance information. Mon General is notifying affected individuals and offering two years of free credit monitoring.