norm: carolinas medical center randolphno LEI · no CIKMax severity: High

Canonical registry

Carolinas Medical Center - Randolph

ent_43eec001372a565e208bc767

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

5,600

as filed · HHS OCR NC

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Carolinas Medical Center - Randolph
Normalized: carolinas medical center randolph— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NCHHS OCRas victim2012-12-07
Carolinas Medical Center - Randolph (NC) reported to HHS OCR on 2012-12-07 a Hacking/IT Incident affecting 5,600 individuals. A physician responded to a phishing email and surrendered her password to a third party, causing all her emails — containing PHI including names, dates of birth, medications, treatment info, SSNs (5 patients), addresses, and medical record numbers — to be auto-forwarded externally. CE remediated by disabling auto-forwarding, enabling foreign-access alerts, and training staff on social engineering. OCR obtained assurances of corrective action.