NCHHS OCRFirst filing
Filed Nov 26, 2025bd_5ea6441d065864ae
Alleghany Health (NC Healthcare Provider) reported to HHS on 2025-11-26 a Hacking/IT Incident (email phishing) affecting 2,187 patients. Multiple employees were subjected to a phishing attack that exposed PHI including demographic, clinical, and financial information via Email. The CE notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards. OCR provided technical assistance on HIPAA Breach Notification Rules. No business associate was involved.
Affected (this filing): 2,187
HHS notified