UNC Hospitals
ent_958b0538b31291e9c3870ed7
Disclosures
5
HHS OCR · 1 jurisdiction
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
27,113
nationwide · HHS OCR NC
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- UNC Hospitals
- Normalized
- unc hospitals— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- NORTH CAROLINAHHS OCRas victim2025-09-19
UNC Hospitals (NC) reported to HHS on 2025-09-19 a Hacking/IT Incident affecting 6,377 individuals. An employee was the target of an email phishing scheme that compromised PHI including demographic, financial, and clinical information. Breached information was located in Email. The CE notified HHS, affected individuals, the media, and posted substitute notice. Additional administrative, technical, and security safeguards were implemented. OCR provided technical assistance.
- NORTH CAROLINAHHS OCRas victim2024-04-02
UNC Hospitals (NC, healthcare provider) reported a Hacking/IT Incident affecting 3,142 individuals via Email to the HHS OCR breach portal on 2024-04-02. No business associate was indicated. The OCR listing provides no narrative description, threat-actor attribution, attack subcategory, or remediation detail.
- NORTH CAROLINAHHS OCRas reporting2021-11-05
University of North Carolina Health reported to HHS on 2021-11-05 a Unauthorized Access/Disclosure affecting 946 individuals. Breached information located on Electronic Medical Record. Business associate employees impermissibly accessed PHI including names, addresses, and treatment information.
- NORTH CAROLINAHHS OCRas victim2021-10-19
UNC Hospitals reported to HHS on 2021-10-19 a Unauthorized Access/Disclosure affecting 719 individuals. Breached information located on Desktop Computer, Electronic Medical Record.
- NORTH CAROLINAHHS OCRas reporting2017-12-08
UNC Health Care System reported to HHS on 2017-12-08 a Theft affecting 27,113 individuals. Breached information located on Desktop Computer. PHI included names, addresses, birthdates, phone numbers, employment information, and social security information.