FMRS Health Systems Hit by Qilin Ransomware Attack, Exposing Sensitive Patient Data FMRS Health Systems, Inc., a West Virginia-based nonprofit mental health provider serving Raleigh, Fayette, Summers, and Monroe counties, disclosed a data breach after detecting unauthorized access to its systems. The incident, discovered on February 27, 2026, involved an attacker copying files between January 20 and February 27, 2026. While the organization’s electronic health records and email systems remained unaffected, the breach exposed a wide range of sensitive patient data. The ransomware group Qilin claimed responsibility for the attack, posting details on the dark web on March 13, 2026. FMRS reported the breach to the U.S. Department of Health and Human Services (HHS) on April 28, 2026. Compromised data includes: - Names, addresses, and dates of birth - Social Security and driver’s license numbers - Financial account details - Medical history, diagnostic, and treatment records - Prescription and physician information - Health insurance and medical record numbers The law firm Shamis & Gentile P.A. is investigating potential class action claims for affected individuals, citing damages such as identity theft risks, financial losses, and emotional distress. FMRS, founded in 1969, operates from its Beckley headquarters and provides behavioral health services, including counseling, addiction treatment, and recovery support.