Was I affected by a UNC Hospitals data breach?

If you received healthcare services from UNC Hospitals, you may have been affected by one of their 2 reported breaches. Check your mail for breach notification letters, review your medical records for unauthorized changes, and use our breach checker tool to search for specific incidents.

Was my data affected by the UNC Hospitals breach?

If you were a patient of UNC Hospitals during the breach period, your data may have been compromised. Check your mail for breach notification letters. You can also contact UNC Hospitals directly or file a records request to verify what data was accessed.

What data was exposed in the UNC Hospitals breach?

Healthcare data breaches can expose names, dates of birth, Social Security numbers, medical records, insurance information, and financial data. The specific data types vary by incident. Review the breach notification from UNC Hospitals for details on what was compromised.

Can I sue UNC Hospitals for a data breach?

Whether you can bring or join a claim depends on the incident, governing law, documented harm, filing deadlines, and any court-approved settlement terms. Review current court materials and consult a licensed healthcare data breach attorney for advice about your circumstances.

Request Records

Loading...

UNC Hospitals Data Breach History

UNC Hospitals has been involved in 2 reported healthcare data breaches affecting 10K patients.

How many data breaches has UNC Hospitals had?

UNC Hospitals has been involved in 2 reported healthcare data breaches affecting a total of 10K patients. The earliest breach was reported in 2024 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from UNC Hospitals, review the timeline below to check if your data may have been compromised.

North CarolinaHacking/IT Incident

2

Total Breaches

10K

Patients Affected

2024

First Breach

2025

Most Recent

Breach Timeline

2025

UNC Hospitals

2025-09-19 · North Carolina

medium

6K affectedHacking/IT IncidentEmail

Protected health information (PHI) likely exposed includes: patient names, medical record numbers, dates of birth, Social Security numbers (if present in email communications), insurance information and policy numbers, clinical notes and medical histories, medication lists and prescriptions, laboratory and diagnostic test results, appointment scheduling information, healthcare provider names and contact information, billing and payment information, insurance authorization details, potentially scanned copies of identification documents and insurance cards, email metadata revealing patient-provider relationships, and any attachments containing detailed medical records or sensitive health information.

2024

UNC Hospitals

2024-04-02 · North Carolina

medium

3K affectedHacking/IT IncidentEmail

Based on typical email system compromises in healthcare settings, the following types of protected health information may have been exposed: ### Personal Identifiers - Full names - Medical record numbers - Patient account numbers - Dates of birth - Social Security numbers (if included in email communications) ### Contact Information - Home addresses - Telephone numbers - Email addresses ### Clinical Information - Diagnoses and medical conditions - Treatment plans and clinical notes - Medication lists and prescriptions - Laboratory and imaging test results - Appointment information and scheduling details - Healthcare provider names and specialties ### Financial Information - Insurance information and policy numbers - Billing account details - Payment information (if discussed in email) - Healthcare claims information ### Other Sensitive Data - Emergency contact information - Family medical history (if discussed in communications) - Disability status or accommodations - Any other information contained in email attachments or message bodies

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.

Related resources

UNC Hospitals Data Breach History

UNC Hospitals has been involved in 2 reported healthcare data breaches affecting 10K patients.

How many data breaches has UNC Hospitals had?

UNC Hospitals has been involved in 2 reported healthcare data breaches affecting a total of 10K patients. The earliest breach was reported in 2024 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from UNC Hospitals, review the timeline below to check if your data may have been compromised.

North CarolinaHacking/IT Incident

2

Total Breaches

10K

Patients Affected

2024

First Breach

2025

Most Recent

Breach Timeline

2025

UNC Hospitals

2025-09-19 · North Carolina

medium

6K affectedHacking/IT IncidentEmail

Protected health information (PHI) likely exposed includes: patient names, medical record numbers, dates of birth, Social Security numbers (if present in email communications), insurance information and policy numbers, clinical notes and medical histories, medication lists and prescriptions, laboratory and diagnostic test results, appointment scheduling information, healthcare provider names and contact information, billing and payment information, insurance authorization details, potentially scanned copies of identification documents and insurance cards, email metadata revealing patient-provider relationships, and any attachments containing detailed medical records or sensitive health information.

2024

UNC Hospitals

2024-04-02 · North Carolina

medium

3K affectedHacking/IT IncidentEmail

Based on typical email system compromises in healthcare settings, the following types of protected health information may have been exposed: ### Personal Identifiers - Full names - Medical record numbers - Patient account numbers - Dates of birth - Social Security numbers (if included in email communications) ### Contact Information - Home addresses - Telephone numbers - Email addresses ### Clinical Information - Diagnoses and medical conditions - Treatment plans and clinical notes - Medication lists and prescriptions - Laboratory and imaging test results - Appointment information and scheduling details - Healthcare provider names and specialties ### Financial Information - Insurance information and policy numbers - Billing account details - Payment information (if discussed in email) - Healthcare claims information ### Other Sensitive Data - Emergency contact information - Family medical history (if discussed in communications) - Disability status or accommodations - Any other information contained in email attachments or message bodies

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.