Morehead Memorial Hospital

Morehead Memorial Hospital is a healthcare facility operating in the United States that provides medical services to patients. As a hospital, it delivers inpatient and outpatient care, including diagnostic examinations, treatment procedures, and supportive health services for the community it serves. The organization handles protected health information as part of its routine operations, which subjects it to federal privacy and security requirements such as HIPAA. Its headquarters are situated in the United States, though the specific city or state is not detailed in the available sources. The facility operates under the name Morehead Memorial Hospital, reflecting its memorial designation.

On September 15, 2017, Morehead Memorial Hospital experienced a phishing attack that compromised two employee email accounts. The breach potentially exposed patient and employee data, including health insurance payment summaries, treatment overviews, health plan details, and limited Social Security numbers. Upon discovering the incident, the hospital disabled the affected accounts and reset network passwords to prevent further unauthorized access. It enlisted forensic experts to investigate the breach and notified the FBI and the Department of Homeland Security of the event. Affected individuals were offered free identity‑monitoring services, and the hospital established a dedicated website and assistance line to provide information and support.