NC · HHS OCR reports
HIPAA breaches in North Carolina
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in North Carolina.
Reports
210
Individuals affected
28,692,755
Under investigation
22
Top type: Hacking/IT Incident
State breach notification law
N.C. Gen. Stat. §§ 75-60 to 75-66 (Identity Theft Protection Act) (amended 2009)
Timing: North Carolina
Read the North Carolina data breach notification law summaryAll reports, newest first
Page 4 of 5. 210 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Carolina Digestive Health Associates, PA | Healthcare Provider | 10,988 | Apr 26, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Diagnostic Radiology & Imaging, LLC | Healthcare Provider | 800 | Apr 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Coastal Cape Fear Eye Associates, P.A. | Healthcare Provider | 925 | Feb 1, 2018 | Hacking/IT Incident | Archive (closed) |
| UNC Health Care System | Healthcare Provider | 27,113 | Dec 8, 2017 | Theft | Archive (closed) |
| Carolina Oncology Specialists | Healthcare Provider | 1,551 | Oct 16, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Morehead Memorial Hospital | Healthcare Provider | 66,000 | Sep 15, 2017 | Hacking/IT Incident | Archive (closed) |
| ABB, Inc. | Healthcare Provider | 28,012 | Sep 11, 2017 | Hacking/IT Incident | Archive (closed) |
| The Dermatology Center of Raleigh PA | Healthcare Provider | 3,000 | Jul 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Jones Family Practice, P.A. | Healthcare Provider | 742 | May 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Mecklenburg County, North Carolina | Healthcare Provider | 2,000 | May 4, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| UNC Health Care | Healthcare Provider | 1,298 | Mar 20, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| North Carolina Department of Health and Human Services | Health Plan | 12,731 | Feb 23, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Appalachian Gastroenterology, P.A. | Healthcare Provider | 11,000 | Dec 10, 2016 | Hacking/IT Incident | Archive (closed) |
| The Outer Banks Hospital | Healthcare Provider | 1,000 | Aug 19, 2016 | Loss | Archive (closed) |
| Uncommon Care, P.A. | Healthcare Provider | 13,674 | Jun 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Vidant Health | Healthcare Provider | 897 | Mar 10, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| New Dimension Group, LLC | Healthcare Provider | 1,275 | Nov 25, 2015 | Loss | Archive (closed) |
| North Carolina Department of Health and Human Services | Health Plan | 524 | Nov 13, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| North Carolina Department of Health and Human Services | Health Plan | 1,615 | Oct 19, 2015 | Hacking/IT Incident | Archive (closed) |
| Blue Cross Blue Shield of North Carolina | Health Plan | 1,530 | Sep 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross Blue Shield of North Carolina | Health Plan | 807 | Sep 11, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Medical Management, LLC (MML) | Business Associate | 20,512 | May 15, 2015 | Theft | Archive (closed) |
| Haywood County NC | Healthcare Provider | 955 | Feb 9, 2015 | Loss | Archive (closed) |
| Highlands Cashier Hospital | Healthcare Provider | 26,115 | Dec 11, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Central Dermatology Center, P.A. | Healthcare Provider | 76,258 | Nov 7, 2014 | Theft | Archive (closed) |
| Cone Health Medical Group | Healthcare Provider | 1,872 | Oct 15, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Cone Health Medical Group | Healthcare Provider | 1,872 | Oct 9, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Duke University Health System | Healthcare Provider | 10,993 | Aug 29, 2014 | Theft | Archive (closed) |
| Cornerstone Health Care, PA | Healthcare Provider | 548 | Feb 26, 2014 | Loss, Theft | Archive (closed) |
| North Carolina Department of Health and Human Services | Healthcare Provider | 48,752 | Jan 7, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| North Carolina Department of Health and Human Services | Health Plan | 48,752 | Jan 6, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Tranquility Counseling Services | Healthcare Provider | 1,683 | Dec 23, 2013 | Other | Archive (closed) |
| Associated Urologists of North Carolina | Healthcare Provider | 7,300 | Nov 8, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| North Carolina Department of Health and Human Services - Division of State Operated Health Care Facilities | Healthcare Provider | 1,315 | Nov 8, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Blue Cross and Blue Shield of North Carolina | Health Plan | 687 | Nov 7, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| CaroMont Medical Group | Healthcare Provider | 1,310 | Oct 4, 2013 | Hacking/IT Incident | Archive (closed) |
| MED-EL Coproration | Healthcare Provider | 609 | Jul 5, 2013 | Other | Archive (closed) |
| Fayetteville VAMC | Healthcare Provider | 1,093 | Jun 14, 2013 | Theft | Archive (closed) |
| E-dreamz, Inc. | Business Associate | 1,924 | May 10, 2013 | Hacking/IT Incident | Archive (closed) |
| E-dreamz, Inc. | Business Associate | 9,988 | May 8, 2013 | Hacking/IT Incident | Archive (closed) |
| Laboratory Corporation of America | Healthcare Provider | 1,580 | May 1, 2013 | Theft | Archive (closed) |
| Raleigh Orthopaedic Clinic | Healthcare Provider | 17,300 | Apr 30, 2013 | Improper Disposal, Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Hospice and Palliative Care Center of Alamance Caswell | Healthcare Provider | 5,370 | Apr 4, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Yadkinville Chiropractic DCPA | Business Associate | 1,000 | Feb 6, 2013 | Theft | Archive (closed) |
| Carolinas Medical Center - Randolph | Healthcare Provider | 5,600 | Dec 7, 2012 | Hacking/IT Incident | Archive (closed) |
| Vidant Pungo Hospital | Healthcare Provider | 1,100 | Nov 29, 2012 | Improper Disposal | Archive (closed) |
| Pamlico Medical Equipment LLC | Healthcare Provider | 2,917 | Jul 17, 2012 | Loss | Archive (closed) |
| Bruce G. Peller, DMD, PA | Healthcare Provider | 9,953 | Jun 25, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Duke University Health System | Healthcare Provider | 591 | May 18, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
| Duke University Health System | Healthcare Provider | 1,370 | Mar 23, 2012 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.