Used Car Dealer Fraud in West Virginia: Spotting the Red Flags Before You Sign

/by

Purchasing a vehicle should be an exciting milestone. For many buyers in Kanawha County and throughout West Virginia, acquiring reliable transportation is absolutely essential for keeping a job, supporting a family, and navigating daily life.

Unfortunately, the excitement of driving off the lot can rapidly turn into a financial nightmare when deceptive auto sales tactics are involved. Shady car dealers frequently exploit the complex, high-pressure environment of the finance office to lock hardworking buyers into fraudulent contracts.

West Virginia law provides robust consumer protection mechanisms designed specifically to hold dishonest dealerships accountable. When an auto dealer actively conceals severe collision damage, dramatically inflates the purchase price with phantom add-ons, or engages in illegal spot delivery scams, they violate explicit state and federal statutes. You are not legally bound to absorb the massive financial hit caused by a dealership’s deliberate misrepresentation.

What Is Used Car Dealer Fraud Under West Virginia Law?

Under the West Virginia Consumer Credit and Protection Act (W. Va. Code § 46A-6-104), used car dealer fraud occurs when a dealership utilizes unfair, deceptive, or misleading practices to sell a vehicle. This includes hiding accident history, lying about financing terms, or misrepresenting the mechanical condition of the car.

The West Virginia Consumer Credit and Protection Act serves as a powerful, necessary shield for vehicle buyers. It explicitly prohibits any business from using deceptive acts or unfair methods of competition to secure a sale. Honest salesmanship involves enthusiastic negotiation; fraud involves deliberate, calculated lies meant to separate a buyer from their money under false pretenses.

Automotive fraud rarely looks like a cartoonish scam. It often presents itself as a mountain of confusing paperwork, rushed signature requests, and verbal promises that completely contradict the written contract. Dealership finance managers are highly trained to maintain control of the transaction, actively discouraging buyers from closely reviewing the binding documents they are signing.

To build a successful WVCCPA lawsuit, a consumer must demonstrate that the dealer engaged in a specific deceptive practice, that the buyer relied on that deception, and that actual financial harm resulted. This harm could manifest as an overpriced loan, thousands of dollars in unexpected mechanical repairs, or a vehicle that cannot be legally registered with the West Virginia Division of Motor Vehicles.

What Is Yo-Yo Financing and Is It Legal In WV?

Yo-yo financing, also known as a spot delivery scam, happens when a dealer lets a buyer drive a car home before the financing is officially approved. Days later, the dealer claims the financing fell through and demands the buyer return the car or sign a new contract with significantly higher interest rates.

Spot delivery is one of the most stressful and financially devastating tactics utilized by deceptive dealerships. The scam relies heavily on the emotional psychology of car buying. The dealer allows the buyer to leave the lot with the new vehicle, show it off to family and friends, and form an attachment to it. The buyer genuinely believes the transaction is completely finalized.

Several days or even weeks later, the dealership suddenly calls the buyer with a manufactured crisis. They claim the original bank rejected the loan application, often blaming the buyer’s credit score. The dealer then issues an aggressive ultimatum: bring the car back immediately and forfeit the down payment, or return to the dealership to sign a completely new financing agreement.

The new agreement inevitably features a dramatically higher interest rate, a longer loan term, or a demand for a larger cash down payment. The dealer essentially uses the threat of repossession to force the consumer into a highly unfavorable financial arrangement they never would have agreed to initially.

How Do Car Dealers Use Spot Delivery Scams?

Dealers often utilize spot delivery to pressure buyers into unfavorable terms. After the buyer takes possession of the vehicle, the dealer contacts them claiming the original loan was rejected. The dealer then threatens to repossess the car or keep the down payment unless the buyer agrees to a higher monthly payment.

When a buyer refuses to sign the new, highly inflated contract, deceptive dealers often escalate their tactics rapidly. They may refuse to return the buyer’s original trade-in vehicle, claiming it has already been sold at auction. They may threaten to report the new vehicle as stolen to local law enforcement. Some even threaten to report the buyer to credit bureaus for defaulting on a loan that supposedly never existed in the first place.

These aggressive threats are designed to create panic and force rapid compliance. Under West Virginia law, if a spot delivery contract actually falls through due to legitimate financing issues, the dealer must return the buyer’s down payment and their trade-in vehicle in full. Refusing to do so is a severe violation of consumer protection statutes.

How Does Title Washing Hide a Car’s True History?

Title washing is a fraudulent practice where a dealer transfers a vehicle with a branded title—such as salvage or flood damage—across state lines into a state with different registration requirements. This maneuver erases the damage history from the paperwork, allowing the dealer to sell the compromised vehicle as having a clean title.

When a vehicle sustains massive damage from a severe collision or a natural disaster, insurance companies declare it a total loss. The state then issues a branded title, permanently marking the car as a “salvage” or “flood” vehicle. This branding serves as a critical, permanent warning to future buyers that the car has suffered catastrophic structural or electrical damage.

Unscrupulous dealers purchase these totaled vehicles at auction for pennies on the dollar. They then exploit loopholes in the national titling system by rapidly transferring the registration through multiple states. Because states do not share a perfectly unified database, a salvage title issued in Ohio might successfully be registered as a completely clean title once it crosses the border into West Virginia.

Selling a title-washed vehicle is incredibly dangerous. Consumers unknowingly purchase cars with deeply compromised structural frames, missing airbags, or severe electrical issues caused by prolonged water submersion. If that vehicle is involved in a subsequent crash on I-64 or a rural mountain road, the compromised frame can collapse, resulting in devastating, life-altering injuries.

Can A Dealer Be Sued for Odometer Fraud in West Virginia?

Yes. Rolling back an odometer to display lower mileage is a severe violation of both the West Virginia Consumer Credit and Protection Act and the Federal Odometer Act. Consumers who uncover odometer fraud can sue the deceptive dealership for substantial financial compensation, which often includes treble damages and attorney fees.

Odometer rollback is one of the oldest and most financially lucrative forms of automotive fraud. By artificially lowering the mileage displayed on the dashboard, a dealer can instantly inflate the perceived value of a used car by thousands of dollars. While mechanical odometers were physically rolled back by hand, modern digital odometers are easily manipulated using inexpensive software tools plugged directly into the vehicle’s diagnostic port. This practice is strictly prohibited by the Federal Odometer Act, which carries incredibly severe penalties.

Victims of odometer fraud face immediate financial harm. They drastically overpay for a high-mileage vehicle nearing the end of its mechanical lifespan. They also face unexpected, massive repair bills for replacing worn transmissions, timing belts, and suspension components that supposedly had years of life remaining.

Signs of potential odometer fraud include:

  • Heavy wear on the brake pedal, steering wheel, and driver’s seat that contradicts the low mileage displayed.
  • Oil change stickers on the windshield or inside the door jamb that list higher mileage than the odometer currently shows.
  • Discrepancies between the dashboard mileage and the vehicle’s official Carfax or AutoCheck history report.
  • Missing or heavily altered maintenance records provided by the dealership.

Does An “As-Is” Sale Protect a Deceptive Dealer?

Selling a used car “as-is” does not give a West Virginia dealership a free pass to commit fraud. While an “as-is” clause waives implied warranties, a dealer can still be held legally liable if they actively lied about the vehicle’s condition, concealed known safety defects, or made specific false verbal promises.

Dealerships heavily rely on the “as-is” buyer’s guide sticker prominently displayed in the window of a used car. They frequently tell angry consumers that signing the “as-is” paperwork completely blocks any potential legal action, regardless of what goes wrong with the vehicle. This is a deliberate, calculated misrepresentation of consumer law.

An “as-is” clause simply means the dealer is not providing a warranty for future, unpredictable mechanical breakdowns. It absolutely does not give the dealer legal permission to affirmatively lie about the vehicle prior to the sale. You cannot legally sell a car “as-is” if you know the engine block is cracked and deliberately hide that fact from the buyer.

If a salesman explicitly promises that a vehicle has never been in an accident, or assures a buyer that a specific mechanical issue was fully repaired, those verbal representations carry profound legal weight. If those promises prove to be entirely false, the resulting fraud claim easily pierces the supposed protection of the “as-is” paperwork.

What Are Phantom Add-Ons and Packed Payments?

Phantom add-ons occur when a dealer charges a buyer for accessories, warranties, or services that were never requested or actually installed on the vehicle. Payment packing involves inflating the quoted monthly payment above the actual loan cost and using the hidden difference to sneak in these expensive, unwanted products.

The finance and insurance (F&I) office is consistently the most profitable room in any car dealership. It is also the primary location where aggressive automotive fraud occurs. Finance managers often present buyers with a massive stack of complex paperwork, highlighting only the signature lines while actively rushing the review process.

During this rushed process, dealers frequently slip highly expensive, completely unnecessary products into the final loan amount without the buyer’s explicit knowledge or consent. These phantom add-ons dramatically increase the total cost of the vehicle and the resulting monthly payments.

Common examples of phantom add-ons include:

  • Overpriced extended warranties that the buyer explicitly declined during negotiations.
  • Charges for VIN etching services that were never actually performed on the vehicle’s windows.
  • Highly inflated fees for basic fabric protection sprays or generic paint sealants.
  • Expensive GAP insurance policies added to the loan without any explanation of the coverage or cost.

Payment packing occurs when a dealer intentionally quotes a monthly payment that is significantly higher than the actual cost of the principal and interest. When the buyer agrees to the inflated payment, the finance manager secretly fills that “packed” financial space with the hidden add-ons, maximizing dealership profit through direct deception.

What Damages Can You Recover in a WV Auto Fraud Lawsuit?

Victims of auto dealer fraud in West Virginia can seek significant financial restitution. Recoverable damages often include a refund of the purchase price, actual out-of-pocket financial losses, cancellation of the fraudulent loan contract, and statutory damages. In successful WVCCPA cases, the dealer is generally required to pay the consumer’s attorney fees.

The financial devastation caused by auto fraud extends far beyond the initial purchase price of the vehicle. Consumers who purchase compromised or heavily overpriced cars often face immediate, severe financial hardship. They struggle to afford massive repair bills while simultaneously trying to maintain the highly inflated monthly payments required by the fraudulent loan contract.

Fortunately, the West Virginia Consumer Credit and Protection Act provides incredibly strong remedies for victims of deceptive trade practices. The law is specifically designed to make the injured consumer financially whole and actively punish the dealership for their fraudulent behavior.

A successful automotive fraud lawsuit can help consumers recover:

  • Complete cancellation (rescission) of the fraudulent sales contract and the associated auto loan.
  • A full refund of the down payment, all monthly loan payments made, and the return of any trade-in vehicle.
  • Reimbursement for all actual out-of-pocket financial losses, including towing fees, diagnostic costs, and expensive mechanical repairs.
  • Statutory damages assessed directly against the dealership for each specific violation of the WVCCPA.

Importantly, both state and federal consumer protection laws include powerful fee-shifting provisions. This means that if you successfully prove the dealership committed fraud, the court can legally order the dealership to pay all of your attorney’s fees. This provision ensures that everyday consumers can afford highly skilled legal representation without paying massive hourly rates upfront.

Contact Powell & Majestro for a Free Consultation

Discovering that a dealership deliberately lied to you about a vehicle’s history or hid thousands of dollars in a fraudulent contract is an incredibly frustrating and stressful experience. You do not have to accept the financial damage caused by a deceptive auto dealer. Our knowledgeable attorneys at Powell & Majestro P.L.L.C. have deep experience litigating highly complex consumer protection cases in Charleston and throughout West Virginia.

We are completely dedicated to uncovering the truth behind deceptive business practices. Because many consumer protection statutes include fee-shifting provisions, we can often pursue these complex cases with no upfront out-of-pocket costs to you.

Call our Charleston office today at (304) 346-2889 to schedule a free, confidential consultation. Let our dedicated legal team thoroughly evaluate your sales contract, protect your rights from dealership harassment, and aggressively pursue the maximum financial compensation you deserve.

Frequently Asked Questions

How long do I have to file a lawsuit against a used car dealer in West Virginia?

Under the West Virginia Consumer Credit and Protection Act, you generally have four years from the date of the fraudulent transaction to file a lawsuit. However, it is highly vital to consult an attorney immediately, as critical evidence like internal dealership emails and original sales documents can easily disappear over time.

Can I return a used car within three days in West Virginia?

There is a massive misconception about a “three-day cooling-off period” for vehicle purchases. In West Virginia, once you sign the contract and drive the car off the dealership lot, the sale is generally final. The three-day cancellation rule only applies to very specific types of door-to-door sales, not standard dealership auto purchases.

What should I do if a dealer refuses to return my trade-in vehicle?

If a spot delivery financing deal falls through and the dealer refuses to return your trade-in vehicle, they are likely violating state consumer protection laws. You should absolutely not agree to a new, higher-priced contract just to resolve the situation. Contact a consumer protection attorney immediately to intervene.

How can I check if a vehicle’s title has been washed?

Always run a comprehensive vehicle history report through a reputable service like Carfax or AutoCheck before finalizing a purchase. Additionally, you can utilize the National Motor Vehicle Title Information System (NMVTIS) to check the federal database for specific salvage, junk, or flood branding history across state lines.

Will I have to pay attorney fees to sue a fraudulent car dealership?

Many consumer protection laws, including the WVCCPA and the Federal Odometer Act, feature fee-shifting provisions. This means if you successfully win your fraud case, the presiding judge can order the deceptive dealership to pay your attorney’s fees entirely, allowing you to secure legal representation without paying hourly rates out-of-pocket.

Why Did the FDA Stop Mammograms at The Greenbrier Clinic?

/by

Tabitha Martin had her mammogram at The Greenbrier Clinic on February 13, 2026. The report came back benign. It assured her the finding was dependable because high-resolution real-time ultrasound images had been obtained.

Five weeks later, a certified letter told her she could not rely on any of it.

The FDA ordered the clinic to stop performing mammography on February 26, 2026, after determining that the facility failed to meet the clinical image quality standards established by its accreditation body, the American College of Radiology. That finding reaches backward across every mammogram performed there between October 28, 2023, and February 26, 2026, more than two years of screenings and roughly 1,000 patients scattered across the country and overseas. Powell & Majestro P.L.L.C. filed a federal class action on their behalf in April 2026, and women screened during that window can call (304) 346-2889 for a free case review.

The distinction that matters most to those patients is a narrow one. Nobody has said their results were wrong. What the FDA said is that nobody can vouch for them.

What Prompted the FDA to Shut Down Mammography at the Clinic?

The FDA halted mammography at The Greenbrier Clinic because a review of the facility’s clinical images found they did not meet the quality standards its accreditation body requires. A facility that cannot satisfy those standards loses its authority to scan patients, and the loss takes effect immediately.

Every mammography provider in the United States operates under the Mammography Quality Standards Act of 1992, codified at 42 U.S.C. § 263b, with the operating rules at 21 C.F.R. Part 900. Congress passed it because screening quality varied so widely from one facility to the next that the value of a mammogram depended heavily on where a woman happened to get it.

To hold a certificate, a facility must:

  • Hold FDA certification confirming it is capable of providing quality mammography
  • Maintain accreditation through an FDA-approved body — the American College of Radiology, in this clinic’s case
  • Submit clinical images for periodic review
  • Complete an annual survey conducted by or under the supervision of a medical physicist
  • Pass an annual inspection by a certified MQSA inspector
  • Meet federal requirements for personnel qualifications, equipment, radiation dose, quality assurance, and recordkeeping

When the FDA suspects quality at a facility has degraded far enough to endanger patients, 21 C.F.R. § 900.12(j) governs what happens next. The agency can order an Additional Mammography Review, requiring the facility to turn over clinical images to its accreditation body for evaluation. If that review turns up serious image quality deficiencies, accreditation is revoked. Without accreditation, the FDA certificate lapses, and the facility must stop scanning.

What Does the March 23 Letter Actually Mean?

The March 23, 2026, letter was not a courtesy from the clinic. It was a federally mandated notification, and the FDA orders one only after determining that a facility’s mammography quality fell so far outside federal standards as to present a significant risk to human health.

That threshold is written into the regulation. Under § 900.12(j)(2), the agency may require a facility to notify every affected patient and every referring provider once it makes that finding. Routine paperwork lapses do not trigger it.

Staff radiologist Dr. Henry Setliff signed the letters, which went out by certified mail to everyone imaged during the affected period. They disclosed a “serious concern about the quality of the mammography” performed at the facility, explained that the FDA had required the clinic to stop, and told patients to speak with their health care provider as soon as possible. The clinic also acknowledged that most patients would need their prior images reviewed to determine whether a repeat mammogram elsewhere was necessary.

The letter is careful to say individual results are not necessarily incorrect. That is accurate, and it is also the heart of the problem. A screening mammogram is purchased for one reason: to replace uncertainty with an answer. These patients paid for an answer and were left holding a question.

Local reporting suggests some affected patients never received their certified letter. Anyone screened at the clinic between October 28, 2023, and February 26, 2026 should assume they fall inside the affected group regardless of what arrived in the mail.

What Should You Do If You Were Screened at The Greenbrier Clinic?

Patients imaged at the clinic during the affected period should have their prior images reviewed by another provider, preserve every document connected to the screening, and obtain a repeat mammogram if their physician recommends one. The clinical steps come first. The legal ones can follow.

  1. Call your physician. Bring the date of your mammogram and the clinic’s letter if you have it. Your provider decides whether the prior images are usable for comparison or whether you need fresh imaging.
  2. Request your original images and report. Patients have a right to their mammography records. Ask in writing and have them routed to whichever facility handles your follow-up.
  3. Do not wait on the clinic. The FDA has not restored the facility’s authority to perform mammography, and no date has been announced for its return. Your follow-up needs to happen somewhere else.
  4. Keep the paper. The letter, the envelope, your bill, your explanation of benefits, receipts for out-of-pocket costs, and every invoice generated by repeat screening. These establish both class membership and damages.
  5. Write down the timeline. When you were screened, what you were told, when the letter arrived, and what it cost you to sort out. Memory fades faster than litigation moves.

Who Pays for the Repeat Mammogram?

No patient has been reimbursed. The clinic billed for the original screenings, collected from patients and their insurers, and as of the filing of the federal complaint had issued no refund, rebate, or credit for imaging the FDA determined was unreliable.

The cost lands in two places. Insurers commonly cover one screening mammogram per plan year, so a second scan inside the same twelve months can be denied outright or applied to a deductible. And every patient who paid coinsurance or a deductible on the first mammogram paid it for a service she did not receive.

That is the economic core of the litigation. The claims are not built on a misread scan. They are built on money changing hands for a diagnostic service that did not meet the standard it was sold as meeting.

What Lawsuits Have Been Filed Against The Greenbrier Clinic?

Three proposed class actions were filed within roughly six weeks of the notification letters — two in federal court and one in state court.

The first, Martin v. The Greenbrier Clinic, Inc., No. 5:26-cv-00252, was filed April 7, 2026 in the United States District Court for the Southern District of West Virginia, Beckley Division, and assigned to Judge Frank Volk. It advances five causes of action:

  • Unfair and deceptive acts and practices under the West Virginia Consumer Credit and Protection Act
  • Unjust enrichment
  • Breach of contract
  • Fraudulent, deceptive, or misleading representations
  • Negligent infliction of emotional distress

The proposed class covers everyone who received mammography services at the clinic between October 28, 2023, and February 26, 2026 and received the March 23 letter. The complaint estimates the class at roughly 1,000 patients and invokes federal jurisdiction under the Class Action Fairness Act, 28 U.S.C. § 1332(d).

A second suit followed on April 8 in Greenbrier County Circuit Court on behalf of a patient identified as E.H., screened around May 2024, pressing breach of contract and unjust enrichment theories.

A third federal complaint arrived in May on behalf of April Wilson of White Sulphur Springs and Erin Dotson of Ronceverte, screened in October 2024 and March 2025. It proposes a nationwide class raising consumer protection, unjust enrichment, contract, and emotional distress claims.

Residency in West Virginia is not a requirement. The clinic serves resort guests from across the country and abroad, and the proposed classes reach patients wherever they live.

Which West Virginia Laws Apply to These Claims?

The claims run primarily through the West Virginia Consumer Credit and Protection Act, which makes it unlawful to use unfair or deceptive acts or practices while engaged in trade or commerce. W. Va. Code § 46A-6-104.

Several provisions map onto these facts:

  • 46A-6-102(7)(B) — causing confusion or misunderstanding about the approval or certification of goods or services. The complaint alleges the clinic held itself out as operating under FDA-approved standards while its imaging did not comply.
  • 46A-6-102(7)(E) — representing that services carry approval, characteristics, or benefits they do not have.
  • 46A-6-102(7)(G) — misrepresenting that services are of a particular standard, quality, or grade.
  • 46A-6-102(7)(M) — deception or concealment of a material fact intended to be relied upon in connection with the sale of services.

The clinic’s own marketing supplies the comparison. Its website advertised “state-of-the-art diagnostic technologies” and described its 3D mammography as one of the latest innovations in women’s health care, capable of detecting breast cancer earlier and allowing treatment sooner.

Section 46A-6-106 gives consumers a private right of action. Sections 46A-5-104 and 46A-5-106 shift attorney’s fees and costs onto a defendant that violates the Act — which matters in a case where individual economic losses are measured in hundreds of dollars rather than thousands.

How Long Do Patients Have to File a Claim in West Virginia?

Filing deadlines vary by claim, and the shortest one that applies to your situation controls your planning.

  • Consumer protection claims — four years. Va. Code § 46A-5-101 sets a four-year limitations period running from the date the violation occurred, for actions filed on or after September 1, 2015. The West Virginia Supreme Court of Appeals applied that framework in Harper v. Jackson Hewitt, Inc., 706 S.E.2d 63 (W. Va. 2010).
  • Negligent infliction of emotional distress — two years. Va. Code § 55-2-12.
  • Breach of a written contract — ten years. Va. Code § 55-2-6. Oral contracts carry five.

For patients screened in late 2023, the two-year window on emotional distress claims is the one to watch. Waiting carries a practical cost unrelated to the calendar as well: billing records get purged, imaging archives get overwritten, and the memory of what a technologist said in the exam room stops being reliable evidence.

What Mistakes Do Patients Make After a Notification Like This?

  • Reading “not necessarily incorrect” as “probably fine.” The phrase describes uncertainty, not reassurance.
  • Throwing the letter away. It is the cleanest single proof of class membership.
  • Waiting for a refund that has not been offered. No reimbursement has been issued.
  • Skipping the repeat scan over cost. The cost is recoverable. A delayed diagnosis is not.
  • Assuming distance disqualifies them. Patients who traveled to the resort from other states are inside the proposed classes.

What the Shutdown Means for Screening in the Greenbrier Valley

The gap left behind is wider than the patient count suggests, because southern West Virginia was already losing ground on breast cancer.

The state data tells an uncomfortable story. West Virginia women are diagnosed with breast cancer at a lower rate than the national average — 126.8 cases per 100,000 against 131.3 nationally — yet they die of it at a higher rate, 20.8 per 100,000 against 19.2. Fewer diagnoses and more deaths point in one direction: cancers found later, when they are harder to treat. Roughly 32 percent of West Virginia breast cancer cases are caught at a late stage.

Two years of screening that cannot be relied on, in a rural corner of that state, sits badly against those numbers.

Geography compounds the problem. For women in Greenbrier, Monroe, Summers, and Pocahontas counties, follow-up imaging means a drive. CAMC Greenbrier Valley Medical Center in Ronceverte is the nearest hospital to White Sulphur Springs. Beyond that, patients look west along I-64 toward Raleigh General Hospital and Beckley ARH, or further to CAMC in Charleston and WVU Medicine in Morgantown for subspecialty follow-up. A repeat mammogram is not an errand in this part of the state. It is a half-day.

For the clinic’s out-of-state patients — many of whom booked a screening as part of a resort stay — the logistics differ but are no simpler. Records have to be requested from a facility hundreds of miles away and routed to a provider back home.

Frequently Asked Questions (FAQs)

Does the letter mean I have breast cancer?

No. The letter says nothing about your health. It says the imaging used to assess your health did not meet federal quality standards, which is why your provider needs to determine whether a repeat scan is warranted.

I live in another state. Can I still be part of the class?

Yes. The proposed classes cover everyone who received mammography at the clinic during the affected window and received the notification, regardless of where they live. Many of the clinic’s patients came through the resort from other states and other countries.

I was screened during that period but never received a letter. What now?

Contact the clinic to confirm your status and update your address, and speak with your physician about follow-up imaging. Some patients reportedly did not receive their certified letter. The date of your screening, not the arrival of an envelope, determines whether you were affected.

Is this a medical malpractice case?

No. These are consumer protection and contract claims. They rest on what patients were sold and what they paid for, not on an allegation that a radiologist misread a particular film. A patient later diagnosed with breast cancer that earlier imaging should have caught has a different and separate claim, and should have it reviewed individually.

What does it cost to have my situation reviewed?

Nothing. These matters are handled on a contingency fee basis, and the initial consultation is free.

 

Talk With a West Virginia Class Action Attorney

Powell & Majestro P.L.L.C. filed the first federal class action arising from the mammography failures at The Greenbrier Clinic and represents patients affected by the FDA’s determination. The firm has handled complex consumer class actions in West Virginia and nationwide for more than two decades, including litigation involving contaminated water supplies, defective products, and deceptive business practices.

If you were screened at The Greenbrier Clinic between October 28, 2023, and February 26, 2026, we can review your situation at no cost and explain your options.

Call (304) 346-2889 or reach us through our online contact form. You can also read more about the case on our Greenbrier Clinic mammography lawsuit page. There are no fees unless we recover compensation on your behalf.

How Long Does a Hospital Have to Tell You About a Data Breach?

/by

Federal law gives a hospital sixty days. Once a covered health care provider discovers that patient information has been breached, the HIPAA Breach Notification Rule requires notice to each affected individual without unreasonable delay, and in no case later than sixty days after discovery. That is an outer limit, not a target.

Patients of Marshall Health Network received their letters in June 2026, describing an intrusion that began on a vendor’s servers in January 2025. According to a class action complaint filed in the Circuit Court of Putnam County, the health system itself learned of the incident in October 2025 — roughly eight months before the letters went out. Powell & Majestro P.L.L.C. filed that lawsuit on June 11, 2026 on behalf of West Virginia patients whose records were exposed, and anyone who received a notice can call (304) 346-2889 for a free case review.

The gap is the case. Every protective step available to a breach victim (freezing credit, watching for medical billing you do not recognize, placing fraud alerts) depends first on knowing it happened.

What Does Federal Law Require, and How Fast?

HIPAA gives a covered health care provider sixty calendar days from discovery of a breach to notify each affected individual, and the rule requires notice without unreasonable delay even inside that window.

The requirement sits in the Breach Notification Rule at 45 C.F.R. §§ 164.400–414. Separately, the HIPAA Security Rule obligates covered entities and their business associates to ensure the confidentiality, integrity, and availability of electronic protected health information, to guard against reasonably anticipated threats, and to implement technical controls limiting access to authorized users. 45 C.F.R. §§ 164.306, 164.312.

There is a law enforcement exception, and its details matter here. Under 45 C.F.R. § 164.412, a provider may delay notification if a law enforcement official states that notice would impede a criminal investigation — but the form of the request controls how long the delay can run:

  • A written statement must specify the period of delay, and the provider may hold notice for that period.
  • An oral request permits a delay of no more than thirty days, unless a written statement follows within that window.

Marshall Health Network’s notice letters told patients that the vendor had informed the health system that law enforcement investigators directed a delay in notifying patients. The complaint points out what the letter does not say: whether any such request was made in writing, who issued it, what period it covered, whether it reached patient notification as opposed to notification of hospital customers, when it expired, and whether notice followed promptly once it lifted.

One clarification worth making, because it shapes how these cases are built. HIPAA creates no private right of action, and the complaint asserts none. The regulations are used as evidence of the duty and the standard of care that applies to a health care provider handling patient information — not as a statute a patient can sue under directly.

What Does West Virginia Law Require?

West Virginia’s breach notification statute requires notice without unreasonable delay and permits a provider to hold notice only for as long as disclosure would impede a criminal investigation.

The statute is codified at W. Va. Code §§ 46A-2A-101 et seq. It does not set a fixed ceiling the way HIPAA’s sixty-day rule does. Instead, it applies a reasonableness standard, which means the length of any delay has to be justified by something — and once an investigation no longer requires silence, the obligation to notify runs.

The two frameworks stack rather than compete. A West Virginia hospital answers to both, and satisfying neither is a problem the provider has to explain.

What Happened in the Oracle Health Breach?

An unauthorized party used stolen credentials to reach legacy Cerner servers in January 2025, and the consequences have been reaching patients at hospitals across the country ever since.

Oracle acquired Cerner in 2022 in a deal valued at roughly $28 billion and renamed it Oracle Health. The servers involved held records that had not yet been migrated to Oracle’s cloud environment. Oracle has said the stolen credentials were used on or around January 22, 2025, and that the incident was identified on or around February 20, 2025.

What followed is the part patients find hardest to accept. Oracle did not announce the breach publicly and did not notify patients directly. It left notification to its health care clients and asked those organizations to hold off while its investigation continued. In litigation, the company’s attorneys indicated as many as eighty hospitals may have been affected. Health systems have been sending letters one at a time ever since, some more than a year after the intrusion.

Marshall Health Network posted its notice on June 5, 2026 and mailed individual letters the same day. Per that notice, the information involved varied by person but may have included names, Social Security numbers, and details drawn from patient medical records — medical record numbers, treating doctors, diagnoses, medications, test results, images, and information about care and treatment.

Why an Eight-Month Delay Matters More Than It Sounds

A notification delay is not a paperwork problem. It is a stretch of time during which a patient carries all of the risk and none of the information needed to reduce it.

Consider what a person does on day one after learning their Social Security number is in criminal hands. Freeze credit at all three bureaus. Place fraud alerts. Start reading every explanation of benefits for treatment that never happened. Treat any call or email referencing their hospital as suspect. None of that occurs while the letter is still unwritten.

Medical data compounds the problem. A compromised credit card gets cancelled and reissued in a week. A Social Security number cannot be changed except through a difficult process carrying its own consequences for credit and employment, and a medical history never expires. Diagnoses, medications, and treatment records describe a person accurately for life, which is why this information holds its value to criminals for years.

That mismatch is the argument against the remedy offered. Twenty-four months of credit monitoring and identity restoration is a real benefit, and patients should use it. It is also a two-year answer to a lifetime exposure.

Can You Sue If Nobody Has Stolen Your Identity Yet?

In West Virginia, yes. The Supreme Court of Appeals held in 2014 that patients have standing to pursue breach of confidentiality and invasion of privacy claims, and can obtain class certification on them, without evidence that any class member suffered identity theft or economic loss.

The case is Tabata v. Charleston Area Medical Center, 233 W. Va. 512, 759 S.E.2d 459 (2014). Personal and medical information belonging to roughly 3,655 patients had been placed on an electronic database accessible over the internet. Discovery turned up no evidence that anyone had suffered identity theft, and none that the information had even been viewed. The Circuit Court of Kanawha County denied class certification. The Supreme Court of Appeals reversed.

The reasoning rests on the elements of the claims themselves. Under West Virginia law, breach of the duty of confidentiality does not require proof of a concrete injury, and invasion of privacy does not require pleading special damages. Where the underlying causes of action do not demand economic harm, the absence of economic harm does not defeat standing or certification.

The Court was careful to limit itself. It held only that the circuit court erred on standing and abused its discretion on commonality, typicality, and predominance, and it made no determination about whether the plaintiffs could ultimately prove their claims. Justice Ketchum dissented.

Results differ by forum, and honesty about that is worth more than salesmanship. In the consolidated federal litigation over this same Oracle Health breach, a judge in the Western District of Missouri ruled in June 2026 that negligence claims could proceed against the vendor and eight health systems, and rejected the argument that a hospital can hand its data protection duties to a vendor — while dismissing unjust enrichment and invasion of privacy claims and narrowing several state statutory claims. Different law, different forum, different outcome.

Is a Data Breach Claim a Medical Malpractice Claim?

No. West Virginia settled that question in 2012, in a case brought against a hospital that is now part of Marshall Health Network.

In R.K. v. St. Mary’s Medical Center, Inc., 229 W. Va. 712, 735 S.E.2d 715 (2012), hospital employees improperly accessed a patient’s records and disclosed details of his psychiatric hospitalization. The Supreme Court of Appeals reached two conclusions that still govern these cases.

  • HIPAA does not preempt state claims. Common law tort claims based on the wrongful disclosure of medical or personal health information survive alongside the federal scheme. The United States Supreme Court denied review in 2013.
  • The Medical Professional Liability Act does not apply. Allegations about the improper disclosure of medical records fall outside the Act’s definition of “health care,” so the MPLA does not govern them.

The practical weight of that second holding is easy to underestimate. The MPLA imposes pre-suit notice, a screening certificate of merit sworn by a qualified physician, a two-year filing deadline, and statutory caps on noneconomic damages. If those requirements attached to data breach claims, very few patients would ever be able to bring one — no physician can meaningfully certify the merits of a claim about server security.

What Should You Do If You Received a Data Breach Letter?

Freeze your credit first, enroll in the monitoring being offered, then start watching your medical billing as closely as your bank statements.

  1. Freeze your credit at all three bureaus. Freezes are free; they can be lifted temporarily when you need credit, and they stop new accounts in a way that monitoring alone does not. Monitoring tells you after something happens. A freeze prevents it.
  2. Enroll in the offered service. Marshall Health Network and the vendor are offering twenty-four months of Experian IdentityWorks Credit Plus 3B along with identity restoration. The credit monitoring requires you to enroll; it does not start on its own.
  3. Read every explanation of benefits. Medical identity theft shows up as treatment you never received, providers you have never seen, or a deductible that has somehow been met. It can also corrupt your own chart, which carries clinical risk beyond the financial harm.
  4. Treat breach-related contact as suspect. Criminals follow breach coverage and call victims posing as the hospital, the vendor, or the monitoring service. Verify independently before giving information to anyone who contacts you first.
  5. Keep the letter and log your time. Save the notice and its engagement number, and write down hours spent and money paid dealing with the fallout. Time spent mitigating a breach is a recognized element of damages.

Anyone who was treated within the network but never received a letter can reach the dedicated line the health system established at 833-918-4335 to check their status.

Why These Cases Are Being Filed in West Virginia Courts

West Virginia’s own law on medical confidentiality and patient privacy gives these claims firmer footing than the federal alternative, and plaintiffs are filing accordingly.

The Marshall Health Network case sits in the Circuit Court of Putnam County before Judge Phillip Stowers, filed under Rule 23 of the West Virginia Rules of Civil Procedure. The complaint proposes a class of West Virginia citizens who received the health system’s notice, and a subclass of West Virginia citizens whose information appeared inside a class member’s records but who received no letter of their own — spouses and family members whose details sit in someone else’s chart. It alleges the class runs well in excess of one hundred members.

That subclass reflects something people rarely think about until it matters. Your medical file contains information about the people around you, and a breach of your records is a breach of theirs.

The reach here is regional. Marshall Health Network is an academic health system headquartered on Hal Greer Boulevard in Huntington, comprising Cabell Huntington Hospital, St. Mary’s Medical Center, Hoops Family Children’s Hospital, and Rivers Health, along with the employed physician practices of those hospitals. The network describes itself as serving more than a million children and adults across twenty-three counties in West Virginia, southern Ohio, and eastern Kentucky. Anyone treated anywhere in that footprint may have information in the affected systems.

Frequently Asked Questions (FAQs)

I was a patient but never received a letter. Am I affected?

Possibly. Notification lists are assembled from vendor-supplied data and are not always complete, and mail goes astray. Call the health system’s dedicated line at 833-918-4335 to confirm your status and update your address rather than assuming silence means safety.

My spouse received a letter and I did not, but my information is in their records. Do I have a claim?

That situation is specifically addressed in the lawsuit through a proposed subclass. When one person provides a family member’s information in the course of receiving care, that information can be exposed even though the family member was never the patient and never receives a notice.

Is twenty-four months of credit monitoring enough?

It is a genuine benefit and worth enrolling in. It also expires long before the risk does. A Social Security number is effectively permanent, and medical history never becomes stale, which is why longer-term monitoring is among the remedies these cases seek.

Nothing bad has happened to me yet. Do I still have a case?

Under West Virginia law, claims for breach of the duty of confidentiality and invasion of privacy do not require proof that anyone misused your information. Whether a particular person has a viable claim depends on their own facts, but the absence of identity theft so far is not by itself a bar.

The breach happened at a vendor, not at the hospital. Does that matter?

A health system that collects patient information retains obligations over how that information is protected, including when it hands the data to a contractor. A federal judge reached that conclusion in the consolidated litigation over this breach in June 2026, rejecting the argument that hospitals could avoid liability by pointing at their electronic health record vendor.

What does it cost to have my situation reviewed?

Nothing. These matters are handled on a contingency fee basis, and the initial consultation is free.

 

Talk With a West Virginia Data Breach Class Action Attorney

Powell & Majestro P.L.L.C. represents West Virginia patients whose personal and medical information was exposed in the breach of Marshall Health Network’s electronic health record vendor. The firm has litigated consumer and privacy class actions in West Virginia and nationally for more than two decades, often as co-counsel and on referral from attorneys whose practices do not handle complex class litigation.

If you received a notice letter, or believe your information was in the records of someone who did, we can review your situation at no cost and explain what options are available to you.

Call (304) 346-2889 or reach us through our online contact form. We work on a contingency fee basis, and there are no fees unless we recover on your behalf.

Negative Option Billing: The Auto-Renewal Trap Costing Billions

/by

You open your monthly bank statement and notice a peculiar charge. It might be $9.99 for a streaming service you tested out months ago or $39.99 for a monthly supply of cosmetic samples you assumed was a one-time purchase. For many families in the Kanawha Valley, these unauthorized withdrawals drain bank accounts silently. When consumers attempt to stop the billing, they encounter endless customer service loops, dead-end phone numbers, and confusing website interfaces.

What Is Negative Option Billing and How Does It Work?

Negative option billing is a commercial practice where a business interprets a customer’s failure to cancel an agreement as consent to continue charging them. This commonly appears as free trials that automatically convert into paid subscriptions or recurring monthly shipments that consumers never intentionally authorized.

The core concept of a negative option offer relies on consumer inaction. Instead of requiring you to affirmatively authorize a new purchase, the business assumes you want to keep paying them until you actively tell them to stop. This flips the traditional commercial relationship entirely.

Companies deploy these models across numerous industries. Fitness centers, software providers, meal kit deliveries, and digital media platforms frequently use this billing structure. A customer might sign up for a fourteen-day free trial, completely unaware that the terms and conditions state the trial will convert into a costly annual membership.

The primary legal issue arises from consent. Under standard contract law principles, an agreement requires a clear meeting of the minds. However, continuous service offers often obscure the financial commitment. The consumer believes they are making a singular transaction. The corporation claims the consumer authorized a permanent financial relationship.

When businesses bury these terms in illegible print at the bottom of a checkout page, they violate basic fairness standards. Customers should never have to monitor their debit cards defensively just to catch unauthorized recurring shipments.

How Do Dark Patterns Trick Consumers Into Subscriptions?

Companies use manipulative website designs, known as dark patterns, to trick users into accepting recurring charges. These tactics include pre-checked consent boxes, hiding subscription terms in dense blocks of text, or making the cancellation button nearly impossible to locate on the website or application.

Modern digital commerce relies heavily on user interface psychology. Businesses utilize dark patterns, which are sophisticated digital designs engineered to manipulate user behavior. These deceptive layouts intentionally confuse buyers.

One common tactic involves pre-checked consent boxes. A resident in Beckley might purchase a pair of shoes online, unaware that a tiny, already-checked box at the bottom of the screen enrolled them in a VIP Shopper Club for $14.99 a month. The company relies on the buyer’s focus remaining on the shoes, rather than the hidden fine print.

Another widespread dark pattern is cancellation friction. While signing up for a service usually takes mere seconds and a single click, canceling that same service often requires navigating through intentionally broken web links, mandatory phone calls during limited business hours, or manipulative chat bots that refuse to process the termination request.

These designs are not accidental. Corporations spend millions of dollars testing digital interfaces to determine which layouts effectively trap the highest number of consumers. When a company makes the ‘Accept’ button brightly colored and prominent while rendering the ‘Decline’ or ‘Cancel’ option practically invisible, they are engaging in deliberate deception.

In many cases, consumers only discover the trap when their payment method is declined for a different, necessary purchase. By that point, the company may have extracted hundreds of dollars through quiet, incremental charges.

What Does the Federal Trade Commission Rule Say About Auto-Renewals?

The Federal Trade Commission enforces strict rules regarding negative option marketing, primarily requiring businesses to provide a simple “click to cancel” mechanism. The law mandates that canceling a recurring subscription must be just as easy and straightforward as it was for the consumer to initially sign up.

The federal government has recognized the massive financial harm caused by forced continuity programs. The primary federal statute addressing this issue is the Restore Online Shoppers’ Confidence Act (ROSCA). This federal law establishes firm boundaries for how businesses can market continuous service offers on the internet.

Under ROSCA, companies must clearly and conspicuously disclose all material terms of the transaction before obtaining a consumer’s billing information. Furthermore, businesses must secure the consumer’s express informed consent before charging their financial account.

Recently, regulatory oversight has intensified. The Federal Trade Commission continually updates its enforcement guidelines to combat evolving subscription traps. A key component of modern federal enforcement is the click to cancel requirement. This mandate asserts a straightforward standard: a business must make terminating a recurring subscription just as easy as it was to initiate it.

If a consumer can sign up for a digital service entirely online, the company cannot legally force that consumer to call a retention specialist to cancel the service. According to recent federal guidelines, adding unnecessary steps to the termination process constitutes an unfair and deceptive practice. Consumers seeking more information regarding federal enforcement can review the FTC’s official click-to-cancel guidance.

When corporations ignore these federal standards, they expose themselves to substantial civil penalties. Federal regulators regularly initiate enforcement actions against national brands that utilize manipulative billing schemes.

How Does the West Virginia Consumer Credit and Protection Act Protect You?

The West Virginia Consumer Credit and Protection Act safeguards residents from unfair and deceptive business practices, including hidden auto-renewals. Under this state law, consumers who are victimized by deceptive subscription traps can pursue legal action to recover their financial losses and potentially secure statutory damages.

State law provides robust mechanisms for holding deceptive businesses accountable. The primary legislative shield for residents is the West Virginia Consumer Credit and Protection Act. This comprehensive statute prohibits unfair methods of competition and unfair or deceptive acts or practices in the conduct of any trade or commerce.

Under W. Va. Code § 46A-6-104, businesses operate illegally when they deploy misleading statements or hide material facts regarding a transaction. When a company misrepresents a continuous subscription as a one-time promotional offer, they are directly violating this state standard. For the exact statutory language, consumers can review the full text of the West Virginia Consumer Credit and Protection Act.

The West Virginia Attorney General’s Office frequently investigates corporate entities that extract unauthorized funds from local residents. However, state law also empowers individual citizens to take private legal action.

If a business violates the WVCCPA, the affected consumer can file a lawsuit in venues like the Kanawha County Circuit Court to recover their actual financial losses. In cases involving willful corporate deception, the court may also award statutory damages and require the offending company to pay the consumer’s attorney fees. This provision ensures that everyday citizens have the financial means to challenge massive corporate entities in a court of law.

What Are the Warning Signs of a Subscription Trap?

Common warning signs of a subscription trap include unexpected charges on your monthly bank statement, promotional offers that require a credit card for a “free” trial, and convoluted customer service loops that deliberately prevent you from easily terminating your account online or over the phone.

Identifying a deceptive billing scheme early can save significant financial resources. Scammers continuously refine their marketing tactics, but the underlying mechanisms remain largely the same. Consumers should maintain high vigilance when interacting with promotional offers online.

Pay close attention to these distinct warning signs:

  • The Shipping Only Free Trial: The company offers a high-value product for free, requiring only a minimal payment for shipping and handling. This is the most common method used to capture credit card information for future unauthorized billing.
  • Hidden Pre-Authorization Charges: A small, temporary charge of $1.00 appears on your statement immediately after a purchase, signaling that the merchant has tested the card for future recurring withdrawals.
  • Absence of an Online Cancellation Portal: The business allows rapid digital account creation but completely lacks any online interface to manage billing preferences or terminate the service.
  • Dense, Pre-Checked Disclosures: The checkout screen includes pre-checked boxes next to paragraphs of dense legal jargon that vaguely reference monthly benefits or continuous service.
  • Aggressive Retention Tactics: When you attempt to cancel via phone, the customer service representative refuses to process the request immediately, instead reading lengthy scripts offering discounted rates or alternative products.
  • Third-Party Billing Names: The charge on your bank statement does not match the name of the company where you made the original purchase, making it intentionally difficult to track the source of the withdrawal.

If you encounter any of these red flags, monitor your financial accounts closely for the next several billing cycles.

How Can You Legally Stop Unauthorized Recurring Charges?

To stop unauthorized recurring charges, document all communication with the company, officially revoke your authorization for payment in writing, and instruct your bank or credit card provider to block future transactions. If the business refuses to issue a refund, you may need to escalate the dispute legally.

Taking immediate, documented action is vital when you discover an unauthorized subscription. Many consumers simply delete their account on an app and assume the billing will stop. Unfortunately, businesses often treat account deletion and subscription cancellation as two entirely separate legal actions.

To protect your finances, follow these specific steps:

  • Document the Deception: Take screenshots of the website, the cancellation policy (if one exists), and the specific charges on your bank statement. Maintain records of the exact dates and times you attempted to cancel the service.
  • Submit a Formal Cancellation Request: Send a direct, written revocation of your payment authorization via email or certified mail. Clearly state that you do not authorize any future charges to your account.
  • Contact Your Financial Institution: Reach out to your bank or credit card provider. Residents utilizing local branches in Morgantown or Charleston can often handle this in person. Instruct the bank to block all future transactions from that specific merchant.
  • Initiate a Fraud Dispute: Ask your credit card issuer to initiate a chargeback for the unauthorized transactions. Provide them with your documentation proving that you never provided informed consent for the continuous billing.
  • File Regulatory Complaints: Submit formal complaints to the West Virginia Attorney General’s Office and the Federal Trade Commission. While these agencies may not take immediate action on your specific case, they aggregate complaints to build large-scale enforcement actions against deceptive corporations.

By establishing a clear paper trail, you strengthen your position if the business attempts to send the disputed amount to a third-party collection agency.

Can You Recover Money Lost to Deceptive Billing Practices?

Consumers can often recover funds lost to deceptive billing practices through credit card chargebacks, regulatory complaints, or civil litigation. When companies systematically defraud thousands of users through hidden auto-renewals, individuals may join mass tort or class action lawsuits to hold the corporation financially accountable.

Financial recovery remains entirely possible, even against massive international corporations. The legal system provides multiple avenues for victims of negative option billing to reclaim their stolen funds.

For recent charges, the credit card chargeback process serves as the fastest method of recovery. Federal banking regulations require credit card issuers to investigate claims of unauthorized billing. If the merchant cannot produce evidence of your explicit, informed consent for the recurring charge, the bank will typically reverse the transaction.

However, chargebacks often only cover recent billing cycles. If a company has been siphoning funds from your account for a year or more, banking institutions may refuse to reverse the older transactions.

In these situations, civil litigation becomes necessary. Because dark patterns rely on automated software, a company utilizing deceptive billing rarely tricks just one person. They typically defraud thousands of consumers using the exact same digital interface.

This widespread harm frequently leads to class action lawsuits or mass tort litigation. By joining forces, defrauded consumers can pool their resources to hold the corporation fully accountable. Through civil litigation, individuals can demand full refunds, statutory damages under state law, and court orders forcing the company to dismantle their deceptive billing mechanisms.

Why Should You Contact a West Virginia Consumer Protection Attorney?

An experienced West Virginia consumer protection attorney can help you navigate state and federal laws to recover funds taken through fraudulent subscription models. At Powell & Majestro P.L.L.C., we concentrate on holding fraudulent businesses accountable. Whether you reside in Huntington, Beckley, or anywhere in the state, our legal team possesses the resources to investigate corporate misconduct and pursue maximum financial recovery. We evaluate the specific dark patterns used against you and determine the most effective path forward under state and federal law.

Contact us today to schedule your free consultation and discuss your legal options.

Frequently Asked Questions

Are free trials allowed to automatically charge my card?

Companies can only transition a free trial into a paid subscription if they provide clear, conspicuous disclosures upfront. They must obtain your express informed consent before the trial begins. If the terms are hidden in fine print, the subsequent charges are legally highly questionable.

How long do I have to dispute an unauthorized subscription charge in West Virginia?

Generally, banking regulations require consumers to dispute fraudulent credit card charges within 60 days of the statement date. However, for civil lawsuits under state consumer protection laws, the statute of limitations may provide a longer window, typically up to four years, depending on the specific circumstances of the fraud.

Can a company require me to call them to cancel an online subscription?

Under current federal guidelines, requiring a phone call to cancel a service that was initially purchased online is considered a deceptive practice. The FTC mandates a click to cancel standard, meaning the termination process must be as simple as the enrollment process.

What happens if a business ignores my cancellation request?

If a company continues to charge you after you have submitted a clear cancellation request, they are committing unauthorized billing. You should immediately report the transaction as fraudulent to your bank and document the ignored request for potential legal action.

Does a canceled debit card stop a negative option billing cycle?

Canceling your card often stops the immediate withdrawals, but it does not legally terminate the underlying contract the company claims you agreed to. The business may still assess monthly fees, add late penalties, and eventually send the inflated balance to a debt collection agency, damaging your credit score.