2,173 patients hit by phishing breach at Vandalia’s Mon Medical Center

Advertisement

Vandalia Health Mon Medical Center in Morgantown, W.Va., disclosed a phishing attack that exposed the personal information of 2,173 patients.

The hospital, formerly known as Mon General and legally registered as Monongalia County General Hospital Co., filed the breach report with HHS’ Office for Civil Rights on July 31. The agency posted the number in August.

The hospital discovered May 6 that an unauthorized party had gained access to a small number of employee email mailboxes, according to a substitute notice posted to its website. Vandalia Health terminated the unauthorized access the same day and hired an outside forensic security firm to investigate. The probe concluded in late June and found no other hospital systems or data storage were affected.

Exposed information varied by individual and may have included names, dates of birth, email addresses, phone numbers, Social Security numbers, and health and health insurance information. The hospital reset user credentials following the incident and said it is evaluating additional technical safeguards.

Affected individuals are being offered two years of free credit monitoring through notification letters mailed to their homes.

Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit

Advertisement

Next Up in Cybersecurity

Advertisement