NC · HHS OCR reports
HIPAA breaches in North Carolina
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in North Carolina.
Reports
210
Individuals affected
28,692,755
Under investigation
22
Top type: Hacking/IT Incident
State breach notification law
N.C. Gen. Stat. §§ 75-60 to 75-66 (Identity Theft Protection Act) (amended 2009)
Timing: North Carolina
Read the North Carolina data breach notification law summaryAll reports, newest first
Page 1 of 5. 210 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Kostelic and Associates 3PLLC | Healthcare Provider | 535 | Sep 25, 2026 | Hacking/IT Incident | Under investigation |
| Capital Family Physicians | Healthcare Provider | 2,545 | Sep 3, 2026 | Hacking/IT Incident | Under investigation |
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation | Healthcare Provider | 1,551 | Jul 31, 2026 | Hacking/IT Incident | Under investigation |
| Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation | Healthcare Provider | 1,397 | Jul 31, 2026 | Hacking/IT Incident | Under investigation |
| Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation | Healthcare Provider | 1,045 | Jul 31, 2026 | Hacking/IT Incident | Under investigation |
| Family Medical Associates of Raleigh, PA | Healthcare Provider | 500 | Jul 2, 2026 | Hacking/IT Incident | Under investigation |
| Networking Technology, Inc. | Business Associate | 353,844 | May 29, 2026 | Hacking/IT Incident | Under investigation |
| Campbell University | Healthcare Provider | 500 | May 29, 2026 | Hacking/IT Incident | Under investigation |
| Lumexa Imaging | Healthcare Provider | 5,830,949 | May 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Drs. Abdelbaky, Boes, Cameron & Associates of Wake Forest, PLLC | Healthcare Provider | 908 | May 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Drs. Abdelbaky, Boes, Cameron & Associates of Cary Park, PLLC | Healthcare Provider | 547 | May 15, 2026 | Hacking/IT Incident | Archive (closed) |
| Town of Apex, North Carolina | Health Plan | 970 | Mar 30, 2026 | Hacking/IT Incident | Archive (closed) |
| Atlantic Brain and Spine, PA | Healthcare Provider | 1,372 | Mar 27, 2026 | Hacking/IT Incident | Under investigation |
| Coastal Carolina Health Care, PA | Healthcare Provider | 110,304 | Mar 24, 2026 | Hacking/IT Incident | Under investigation |
| Volvo Welfare Benefit Plan | Health Plan | 16,991 | Mar 16, 2026 | Hacking/IT Incident | Archive (closed) |
| Northern Regional Hospital | Healthcare Provider | 1,575 | Mar 15, 2026 | Hacking/IT Incident | Archive (closed) |
| East Carolina Anesthesia Associates | Healthcare Provider | 19,408 | Mar 12, 2026 | Hacking/IT Incident | Under investigation |
| Carolina Foot & Ankle Associates | Healthcare Provider | 501 | Feb 9, 2026 | Hacking/IT Incident | Under investigation |
| Triad Radiology Associates | Healthcare Provider | 11,011 | Feb 6, 2026 | Hacking/IT Incident | Under investigation |
| Gaston Family Health Services dba Kintegra Health | Healthcare Provider | 9,230 | Jan 5, 2026 | Hacking/IT Incident | Archive (closed) |
| Mitchell County Department of Social Services | Healthcare Provider | 501 | Dec 19, 2025 | Hacking/IT Incident | Under investigation |
| Alleghany Health | Healthcare Provider | 2,187 | Nov 26, 2025 | Hacking/IT Incident | Archive (closed) |
| County of Catawba | Health Plan | 500 | Nov 19, 2025 | Hacking/IT Incident | Under investigation |
| Cary Pediatric Center, PA | Healthcare Provider | 25,784 | Nov 17, 2025 | Hacking/IT Incident | Under investigation |
| Loving and Living Center, PC dba Awakenings Center | Healthcare Provider | 17,800 | Nov 7, 2025 | Hacking/IT Incident | Under investigation |
| North Carolina Department of Health and Human Services | Health Plan | 3,437 | Sep 29, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| UNC Hospitals | Healthcare Provider | 6,377 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| The University of North Carolina at Chapel Hill - School of Medicine | Healthcare Provider | 799 | Sep 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Goshen Medical Center | Healthcare Provider | 456,385 | Sep 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Roush Fenway Keselowski Racing, LLC | Health Plan | 2,160 | Sep 12, 2025 | Hacking/IT Incident | Archive (closed) |
| Vance County Department of Social Services | Business Associate | 501 | Aug 22, 2025 | Hacking/IT Incident | Under investigation |
| Precision Endodontics of Raleigh | Healthcare Provider | 4,969 | Aug 5, 2025 | Hacking/IT Incident | Archive (closed) |
| Langdon & Company, LLP Certified Public Accountants | Business Associate | 46,061 | Aug 1, 2025 | Hacking/IT Incident | Under investigation |
| Mountain Laurel Dermatology | Healthcare Provider | 3,324 | Jul 10, 2025 | Hacking/IT Incident | Under investigation |
| Compumedics USA, Inc. | Business Associate | 318,150 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| HopeWay Foundation | Healthcare Provider | 3,523 | May 20, 2025 | Hacking/IT Incident | Archive (closed) |
| Compassion Health Care, Inc. | Healthcare Provider | 23,282 | May 16, 2025 | Hacking/IT Incident | Under investigation |
| Marlboro-Chesterfield Pathology, P.C. | Healthcare Provider | 235,911 | May 9, 2025 | Hacking/IT Incident | Archive (closed) |
| Ambleside, Inc. | Healthcare Provider | 501 | Apr 10, 2025 | Hacking/IT Incident | Under investigation |
| Samaritan's Purse | Health Plan | 2,351 | Mar 28, 2025 | Hacking/IT Incident | Archive (closed) |
| Pinehurst Radiology Associates | Healthcare Provider | 8,682 | Mar 19, 2025 | Hacking/IT Incident | Archive (closed) |
| Hillcrest Convalescent Center, Inc. | Healthcare Provider | 106,194 | Mar 4, 2025 | Hacking/IT Incident | Archive (closed) |
| Carolina Arthritis Associates | Healthcare Provider | 36,961 | Feb 27, 2025 | Hacking/IT Incident | Archive (closed) |
| Asheville Eye Associates, PLLC | Healthcare Provider | 327,756 | Jan 17, 2025 | Hacking/IT Incident | Archive (closed) |
| Ott Cone & Redpath, P.A. | Business Associate | 22,171 | Dec 18, 2024 | Hacking/IT Incident | Archive (closed) |
| Atrium Health | Healthcare Provider | 585,959 | Dec 2, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| AuthoraCare Collective | Healthcare Provider | 57,944 | Nov 19, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Hospice and Palliative Care Charlotte Region dba VIA Health Partners | Healthcare Provider | 777 | Nov 14, 2024 | Hacking/IT Incident | Archive (closed) |
| Smiles in the Pines | Healthcare Provider | 1,800 | Oct 21, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Valleygate Dental Surgery Centers of Charlotte, Fayetteville, and the West, LLC. | Healthcare Provider | 14,589 | Oct 17, 2024 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.