Monongalia General Hospital, also known as Mon Health Medical Center, discovered a phishing attack targeting a small number of email users on May 6, 2026. The hospital, with the assistance of a forensic security provider, terminated the unauthorized access the same day. An investigation concluded in late June 2026, confirming that certain email mailboxes were accessed. The breach exposed first and last names, dates of birth, email addresses, phone numbers, Social Security numbers, health information, and health insurance information for 2,173 individuals in the United States. The hospital posted a public website notice and reportedly sent mailed letters to affected individuals by August 20, 2026. The incident was reported to the U.S. Department of Health and Human Services on July 31, 2026. While a class action lawsuit investigation by Shamis & Gentile P.A. was announced on August 20, 2026, no confirmed class action lawsuit or MDL status has been identified.