Monongalia Health System, Inc. and its affiliated hospitals suffered a data security incident in Feb 2022. The hackers got unauthorized access to its systems and did some unusual activity which disrupted the operations of some of Mon Health's IT systems. They also accessed information pertaining to Mon Health patients, providers, employees, and contractors. Mon Health immediately took its systems offline and reset all the passwords and secured the data and informed the authorities about the incident.

Monongalia Health System, Inc. suffered a data breach between December 8, 2021, and December 19, 2021, where unauthorized actors gained access to patient information. The incident was formally reported to the California Office of the Attorney General on February 28, 2022. While the exact number of affected individuals and the specific types of compromised data (e.g., medical records, personal identifiers, financial details) remain undisclosed, the breach poses significant risks to patient privacy and trust. As a healthcare provider, the exposure of sensitive patient data—even without confirmed misuse—could lead to identity theft, fraud, or targeted phishing attacks. The delay in public disclosure (over two months) may further exacerbate reputational damage and regulatory scrutiny. Given the nature of the compromised entity (a health system), the breach could also disrupt operational trust, potentially deterring patients from seeking care due to concerns over data security. The incident underscores vulnerabilities in healthcare cybersecurity, where protected health information (PHI) is a prime target for cybercriminals. Without clarity on the scope, the long-term consequences—such as legal penalties, financial losses, or erosion of patient confidence—remain uncertain but likely severe.