norm: alleghany healthno LEI · no CIKMax severity: Medium

Canonical registry

Alleghany Health

ent_9cbf0e68dae6cc25d6c23c23

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

2,187

nationwide · HHS OCR NC

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Alleghany Health
Normalized: alleghany health— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NORTH CAROLINAHHS OCRas victim2025-11-26
Alleghany Health (NC Healthcare Provider) reported to HHS on 2025-11-26 a Hacking/IT Incident (email phishing) affecting 2,187 patients. Multiple employees were subjected to a phishing attack that exposed PHI including demographic, clinical, and financial information via Email. The CE notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards. OCR provided technical assistance on HIPAA Breach Notification Rules. No business associate was involved.