Monongalia Health System, Inc. (Mon Health) Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (May 12, 2025) – On March 3, 2025, Monongalia Health System, Inc. (Mon Health) identified a cybersecurity incident that compromised the personal and medical data of at least 4,895 individuals. The breach stemmed from a targeted phishing scheme that led to unauthorized access to several employee email accounts. As a result, cybercriminals were able to view documents containing confidential patient and administrative information.
Mon Health officially reported the incident to the U.S. Department of Health and Human Services on May 3, 2025. The breach is publicly listed on the HHS Office for Civil Rights breach portal.
Although the total number of affected individuals is relatively modest compared to larger-scale healthcare breaches, the inclusion of both protected health information (PHI) and personally identifiable information (PII), (particularly Social Security and insurance policy numbers) presents a heightened risk for identity theft and financial fraud. The incident underscores the persistent threat posed by phishing attacks and the need for stronger email security and employee awareness training in healthcare organizations.
Federman & Sherwood is conducting a comprehensive review of the breach to determine its full scope, identify any additional data exposures, and understand the broader implications. The firm encourages everyone affected—both individuals and organizations—to remain vigilant and take proactive steps to safeguard their personal, medical, and financial information.
The type of information potentially exposed includes:
- Name
- Social Security number
- Medical details
- Health insurance information
- Other sensitive information
What is Monongalia Health System, Inc. (Mon Health)?
Mon Health System, Inc. (Mon Health) is an integrated healthcare delivery system in North Central West Virginia, serving a region that also includes southwestern Pennsylvania and western Maryland. It encompasses a network of hospitals, outpatient centers, and physician clinics.
If you’ve recently been notified of a data breach, you may have questions about the risks involved and the steps you should take next. Federman & Sherwood is actively investigating the incident and evaluating potential legal claims on behalf of individuals whose personal or financial data may have been exposed.
The firm is committed to helping you understand your legal rights and explore your options. Reach out today to find out more or to determine if you may qualify to participate in related legal action.
To connect with a member of our legal team or to request additional details, please email info@federmanlaw.com or visit www.federmanlaw.com.
FEDERMAN & SHERWOOD
(405) 235-1560