Skip to content
Network USA

HHS OCR report ยท 2019

University of North Carolina at Chapel Hill School of Medicine data breach

University of North Carolina at Chapel Hill School of Medicine, a healthcare provider in North Carolina, reported a breach affecting 3,716 individuals to HHS OCR on Nov 12, 2019.

OCR report facts

Covered entity
University of North Carolina at Chapel Hill School of Medicine
Entity type
Healthcare Provider
Individuals affected
3,716
Submission date
Nov 12, 2019
Type of breach
Hacking/IT Incident
Location of breached information
Email
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), University of North Carolina at Chapel Hill School of Medicine, reported that an several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 3,716 individuals. The PHI involved included Social Security numbers, financial information, diagnoses, treatment, and clinical information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE pro...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the University of North Carolina at Chapel Hill School of Medicine data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from University of North Carolina at Chapel Hill School of Medicine legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or University of North Carolina at Chapel Hill School of Medicine.