UNC Hospitals
ent_958b0538b31291e9c3870ed7
Disclosures
4
HHS OCR · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
6,377
as filed · HHS OCR NC
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- UNC Hospitals
- Normalized
- unc hospitals— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- NCHHS OCRas victim2025-09-19
UNC Hospitals (NC) reported to HHS on 2025-09-19 a Hacking/IT Incident affecting 6,377 individuals. An employee was the target of an email phishing scheme that compromised PHI including demographic, financial, and clinical information. Breached information was located in Email. The CE notified HHS, affected individuals, the media, and posted substitute notice. Additional administrative, technical, and security safeguards were implemented. OCR provided technical assistance.
- NCHHS OCRas victim2024-04-02
UNC Hospitals (NC, healthcare provider) reported a Hacking/IT Incident affecting 3,142 individuals via Email to the HHS OCR breach portal on 2024-04-02. No business associate was indicated. The OCR listing provides no narrative description, threat-actor attribution, attack subcategory, or remediation detail.
- NCHHS OCRas victim2021-11-05
University of North Carolina Health reported to HHS on 2021-11-05 a Unauthorized Access/Disclosure affecting 946 individuals. Breached information located on Electronic Medical Record. Business associate employees impermissibly accessed PHI including names, addresses, and treatment information.
- FEDERALHHS OCRas victim2021-10-19
UNC Hospitals reported to HHS on 2021-10-19 a Unauthorized Access/Disclosure affecting 719 individuals. Breached information located on Desktop Computer, Electronic Medical Record.