Monongalia Health System, Inc. suffered a data breach between December 8, 2021, and December 19, 2021, where unauthorized actors gained access to patient information. The incident was formally reported to the California Office of the Attorney General on February 28, 2022. While the exact number of affected individuals and the specific types of compromised data (e.g., medical records, personal identifiers, financial details) remain undisclosed, the breach poses significant risks to patient privacy and trust. As a healthcare provider, the exposure of sensitive patient data even without confirmed misuse could lead to identity theft, fraud, or targeted phishing attacks. The delay in public disclosure (over two months) may further exacerbate reputational damage and regulatory scrutiny. Given the nature of the compromised entity (a health system), the breach could also disrupt operational trust, potentially deterring patients from seeking care due to concerns over data security. The incident underscores vulnerabilities in healthcare cybersecurity, where protected health information (PHI) is a prime target for cybercriminals. Without clarity on the scope, the long-term consequences such as legal penalties, financial losses, or erosion of patient confidence remain uncertain but likely severe.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-551316
TPRM report: https://www.rankiteo.com/company/vandaliahealthmon
"id": "van525083025",
"linkid": "vandaliahealthmon",
"type": "Breach",
"date": "12/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'West Virginia, USA',
'name': 'Monongalia Health System, Inc.',
'type': 'Healthcare Provider'}],
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High (Healthcare)',
'type_of_data_compromised': 'Patient Information'},
'date_publicly_disclosed': '2022-02-28',
'description': 'The California Office of the Attorney General reported that '
'Monongalia Health System, Inc. experienced a data breach '
'involving unauthorized access to patient information between '
'December 8, 2021, and December 19, 2021. The breach was '
'reported on February 28, 2022, but the specific number of '
'individuals affected and all types of information compromised '
'are unknown.',
'impact': {'data_compromised': True},
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'California Office of '
'the Attorney General'},
'title': 'Monongalia Health System Data Breach (2021)',
'type': 'Data Breach'}