Health Data Breach Tracker/NC

Healthcare Provider · Archived

UNC Hospitals

6,377 individuals · submitted September 19, 2025

About this report

The covered entity (CE), UNC Hospitals, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 6,377 individuals. The PHI involved included demographic, financial, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance to the CE.

Summary as published by the HHS Office for Civil Rights.

Organization
UNC Hospitals
State
NC
Entity type
Healthcare Provider
Individuals affected
6,377
Submission date
September 19, 2025
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in NC

More Hacking/IT Incident reports