FMRS Health Systems, Inc., a nonprofit mental health center serving communities across West Virginia, has disclosed a data security incident that exposed sensitive personal and health information belonging to its patients. Companies entrusted with health records and financial data have a responsibility to keep that information secure, and when that trust is broken, affected individuals deserve answers.
FMRS Health Systems, Inc.’s Data Breach Investigation
FMRS Health Systems, Inc. is a nonprofit mental health center based in Beckley, West Virginia, founded in 1969 to serve Raleigh, Fayette, Summers, and Monroe counties. The organization provides counseling, therapy, opioid addiction treatment, recovery support, and community advocacy services for both children and adults.
On February 27, 2026, FMRS identified irregular activity on certain computer systems within its network. The organization took steps to secure its systems and launch an investigation, which determined that an unauthorized party had accessed certain systems between January 20, 2026, and February 27, 2026. During that window, files containing patient information were copied from the affected systems. FMRS stated that its electronic health record and email systems were not impacted by the incident. The breach was formally disclosed to the U.S. Department of Health and Human Services on April 28, 2026, and FMRS posted a notice describing the incident on its own website to inform affected individuals.
A ransomware group publicly claimed responsibility for the attack on March 13, 2026, posting about the incident on the dark web and stating it had obtained the organization’s data. FMRS has indicated that its investigation into the full scope of the incident remains ongoing.
Healthcare and behavioral health providers have become a frequent target for ransomware groups because the records they maintain combine some of the most sensitive categories of personal data in one place, including Social Security numbers, financial account information, and detailed medical and treatment histories. When this kind of combined data is exposed, it can enable not just identity theft and financial fraud, but also medical identity theft, where a criminal uses a victim’s information to obtain healthcare services or prescriptions, or health insurance fraud that can corrupt a victim’s own medical records.
The gap between when a breach is discovered and when the public is formally notified, in this case roughly two months between FMRS’s discovery of the intrusion and its disclosure to federal regulators, is a common feature of these incidents. Organizations typically need time to determine the scope of an intrusion, identify which individuals were affected, and prepare legally required notifications, but that gap can leave stolen data circulating on the dark web well before the people impacted are told what happened and are able to take protective action.
When Did This Breach Occur?
FMRS Health Systems identified irregular network activity on February 27, 2026. The subsequent investigation determined that unauthorized access to certain systems occurred between January 20, 2026, and February 27, 2026. The breach was disclosed to the U.S. Department of Health and Human Services on April 28, 2026, and a ransomware group claimed responsibility for the attack in a dark web posting on March 13, 2026.
What Information Was Breached?
According to FMRS Health Systems’ own notice, the information involved in this breach may include names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and financial account information, along with medical history, diagnostic, treatment, prescription, physician, medical record number, and health insurance information. FMRS confirmed that its electronic health record and email systems were not affected by the incident.
What You Can Do
If you believe your information may have been affected by the FMRS Health Systems data breach, consider taking the following steps:
- Request free credit reports at AnnualCreditReport.com and review them for any accounts or activity you do not recognize.
- Consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion to help prevent new accounts from being opened in your name.
- Monitor your financial account statements closely for unauthorized transactions.
- Review health insurance statements and Explanation of Benefits documents for any medical services, prescriptions, or claims you did not receive.
- Be cautious of phishing attempts referencing FMRS Health Systems or this breach by name.
- Report any signs of identity theft to the Federal Trade Commission at IdentityTheft.gov and to local law enforcement if needed.
File a Data Breach Lawsuit Against FMRS Health Systems, Inc.
If your personal or health information was compromised as a result of the FMRS Health Systems data breach, you may have legal options available to you. Organizations that collect and store sensitive medical and financial information have a duty to implement reasonable safeguards, and a failure to do so can leave patients facing lasting consequences.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
