Health Plan · Archived
North Carolina Department of Health and Human Services
3,437 individuals · submitted September 29, 2025
About this report
The covered entity (CE), North Carolina Department of Health and Human Services, reported that an employee of its business associate (BA) mailed the protected health information (PHI) of 3,437 individuals to the wrong recipients. The PHI involved clinical and demographic information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE and BA implemented additional administrative, technical, and security safeguards and retrained workforce members to better protect its PHI.
Summary as published by the HHS Office for Civil Rights.
- Organization
- North Carolina Department of Health and Human Services
- State
- NC
- Entity type
- Health Plan
- Individuals affected
- 3,437
- Submission date
- September 29, 2025
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Paper/Films
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in NC
NC · Sep 25, 2026
Kostelic and Associates 3PLLC
535 individuals
NC · Sep 3, 2026
Capital Family Physicians
2,545 individuals
NC · Jul 31, 2026
Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation
1,397 individuals
NC · Jul 31, 2026
Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation
1,045 individuals
NC · Jul 31, 2026
Tarboro Family Dentistry
4,713 individuals
NC · Jul 31, 2026
Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation
1,551 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals