Montgomery General Hospital Suffers Cyberattack and Data Leak

The cyberattack involved unauthorized access to the hospital’s IT systems.

By HFT Staff

Montgomery General Hospital in West Virginia has suffered a cyberattack that saw unauthorized individuals gain access to its IT systems on or around February 28, 2023, and deploy ransomware on or around March 1, 2023. The attackers gained access to certain servers, exfiltrated files and encrypted data. Montgomery General Hospital engaged a third-party security firm to assist with the investigation to determine the extent of the breach and has confirmed that its cloud-based electronic medical record system was not affected. The exfiltrated files mostly contained historical data, including budget documents, cost reports and vendor payments; however, some of the files contained patient information. 

At this stage of the investigation, the extent to which patient information has been compromised is still being determined. The hospital has confirmed that notifications will be sent to affected patients ahead of the 60-day reporting deadline of the Breach Notification Rule and credit monitoring services will be offered to individuals whose Social Security numbers were involved. Montgomery General Hospital said it temporarily took its electronic medical record system offline as a precaution, but access was promptly restored and patient care was unaffected by the attack. A hospital spokesperson confirmed that a ransom demand was received for $750,000 but the ransom was not paid on the advice of law enforcement and due to the historical nature of the compromised data. The hospital’s investigation indicates the incident started with a phishing attack and the hospital is aware that some of the stolen files have been publicly released on the ransomware group’s data leak site. 

The D#nut ransomware gang has claimed responsibility for the cyberattack and said it had entered into negotiations with the hospital, but lost patience and started to release some of the stolen data on its data leak site. A member of the group contacted DataBreaches and shared a link to the published data and the site confirmed the published files included employee data. When questioned, the group said access was gained by exploiting a Microsoft Exchange vulnerability. 

April 14, 2023

Topic Area: Information Technology , Safety , Security

Recent Posts

Texas to Offer Grant to Aid Operations for Rural Operations

Over 80 hospitals in Texas currently face closure.

Allina Health Opens Lakeville Specialty Center

The 100,000-square-foot center includes more than 10 specialty services.

How Can BAS Help HVAC Systems Be More Efficient?

HVAC manufacturers discuss the efficiencies of pairing HVAC systems with BAS.

Lessons to Learn from the Ascension Ransomware Attack

Securing backup data, having the correct resources and sharing information are crucial to addressing ransomware attacks.

DIG Completes Two New Hackensack Meridian Hospital Projects

Their Jersey Shore and JFK Medical projects focused on enhancing the patient and staff experience.


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.