Skip to content
Network USA

HHS OCR report ยท 2025

The University of North Carolina at Chapel Hill - School of Medicine data breach

The University of North Carolina at Chapel Hill - School of Medicine, a healthcare provider in North Carolina, reported a breach affecting 799 individuals to HHS OCR on Sep 19, 2025.

OCR report facts

Covered entity
The University of North Carolina at Chapel Hill - School of Medicine
Entity type
Healthcare Provider
Individuals affected
799
Submission date
Sep 19, 2025
Type of breach
Hacking/IT Incident
Location of breached information
Email
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), UNC Chapel Hill - School of Medicine, reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 799 individuals. The PHI involved included demographic, financial, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the The University of North Carolina at Chapel Hill - School of Medicine data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from The University of North Carolina at Chapel Hill - School of Medicine legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or The University of North Carolina at Chapel Hill - School of Medicine.