Strauss Borrelli PLLC, a leading data breach law firm, is investigating Monongalia Health System, which does business as Mon Health, regarding its recent data breach. The Mon Health data breach involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT MONONGALIA HEALTH SYSTEM D/B/A MON HEALTH:
Mon Health is a healthcare network based in West Virginia. Founded in 1982, Mon Health is the parent company of Mon Health Medical Center, Mon Health Preston Memorial Hospital, Mon Health Stonewall Jackson Memorial Hospital, and Mon Health Marion Neighborhood Hospital.2 Today, Mon Health’s main focus is to aid in strategic planning and to manage all of its affiliated entities.2 Headquartered in Morgantown, West Virginia, Mon Health employs over 1,000 individuals.
WHAT HAPPENED?
Recently, Mon Health announced that the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, Mon Health recently discovered that a small number of employee email users were the subject of a phishing attack.1 As a result, Mon Health launched an investigation to determine the nature of the incident.
Through its investigation, on March 3, 2025, Mon Health confirmed that sensitive personal information may have been accessed by an unauthorized third party during the breach. As a result, Mon Health began a review of the data to determine what information had been impacted, as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Physician name
- Facility name
- Medical information
- Health insurance policy numbers
On March 5, 2025, Mon Health posted a notice of the incident on its website. Additionally, on the same date, Mon Health began sending breach notification letters to impacted individuals. Based on the website breach notice, Mon Health is providing affected individuals with a list of the specific types of sensitive information impacted. A link to the form breach notification that Mon Health posted to its website is below.
If you received a breach notification letter from Monongalia Health System d/b/a Mon Health:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
