Geography
North Carolina: 207 healthcare breach filings.
North Carolina entities have reported 207 breaches of 500 or more individuals to HHS since 2009, the 11th most of the 52 states and territories on the register, covering 28,689,174 individuals (11th by people affected). 20 are still under investigation. Hacking/IT Incident is the breach type on 63% of them, and network server the most common location (45%).
Filings
207
11th of 52 states and territories
Individuals affected
28,689,174
Median filing 3,679
Largest filing
10,251,784
Laboratory Corporation of America Holdings dba LabCorp, 2019
Hacking / IT share
63%
54 filings involve a business associate
Direct answer / North Carolina on the HHS portal
The largest North Carolina filing is Laboratory Corporation of America Holdings dba LabCorp (10,251,784 individuals, submitted 13 July 2019). The busiest year was 2022 with 23 filings. Healthcare Providers account for 77% of the state's filings. 76 filings of 10,000 or more individuals have their own page; the remaining 131 are listed in the table at the foot of this page.
Section NC.1 / Largest filings
Ten largest North Carolina breaches
| # | Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|---|
| 1 | Laboratory Corporation of America Holdings dba LabCorp | Healthcare Provider | 10,251,784 | 13 Jul 2019 | |||
| 2 | Lumexa Imaging | Healthcare Provider | 5,830,949 | 15 May 2026 | |||
| 3 | AccuDoc Solutions, Inc. | Business Associate | 2,652,537 | 27 Nov 2018 | |||
| 4 | Novant Health Inc. | Business Associate | 1,362,296 | 14 Aug 2022 | |||
| 5 | US Radiology Specialists, Inc. | Business Associate | 1,322,347 | 18 Feb 2022 | |||
| 6 | Eastern Radiologists, Inc | Healthcare Provider | 886,746 | 29 Feb 2024 | |||
| 7 | Atrium Health | Healthcare Provider | 585,959 | 2 Dec 2024 | |||
| 8 | WakeMed Health and Hospitals | Healthcare Provider | 495,808 | 14 Oct 2022 | |||
| 9 | Goshen Medical Center | Healthcare Provider | 456,385 | 17 Sep 2025 | |||
| 10 | Networking Technology, Inc.Open | Business Associate | 353,844 | 29 May 2026 |
Section NC.2 / By year
North Carolina filings by submission year
Each year links to the national year page.
| Year | Filings | Individuals affected | Hacking / IT share | Filings with a page |
|---|---|---|---|---|
| 2009 | 1 | 2,000 | 0% | 0 |
| 2010 | 4 | 9,664 | 25% | 0 |
| 2011 | 3 | 7,814 | 33% | 0 |
| 2012 | 8 | 73,531 | 13% | 1 |
| 2013 | 13 | 51,159 | 23% | 1 |
| 2014 | 8 | 215,162 | 0% | 5 |
| 2015 | 7 | 27,218 | 14% | 1 |
| 2016 | 4 | 26,571 | 50% | 2 |
| 2017 | 9 | 142,447 | 22% | 4 |
| 2018 | 8 | 2,690,311 | 63% | 3 |
| 2019 | 11 | 10,319,786 | 64% | 3 |
| 2020 | 16 | 722,637 | 88% | 8 |
| 2021 | 13 | 103,417 | 54% | 1 |
| 2022 | 23 | 3,556,488 | 78% | 10 |
| 2023 | 15 | 621,358 | 73% | 9 |
| 2024 | 23 | 2,123,413 | 74% | 12 |
| 2025 | 23 | 1,633,595 | 96% | 10 |
| 2026 | 18 | 6,362,603 | 100% | 6 |
Section NC.3 / Composition
Breach type, location and who filed
Multi-valued fields count once per value.
Type of breach
Location of breached information
Covered entity type
Section NC.4 / Notification law
What North Carolina law required alongside HIPAA
State notification statute
North Carolina: N.C. Gen. Stat. 75-65
Identity Theft Protection Act
- Notice to individuals
- Without unreasonable delay
- Attorney general threshold
- All breaches (Consumer Protection Division of the AG) (Concurrent with consumer notification)
- Private right of action
- Yes: Civil action under N.C. Gen. Stat. 75-16 as an unfair and deceptive trade practice; treble damages
- Penalty
- Treble damages for affected individuals; AG may seek injunctive relief, penalties, and restitution
The HIPAA Breach Notification Rule runs alongside the state statute: notice to affected individuals and to HHS without unreasonable delay and no later than 60 days after discovery.
Section NC.5 / Filing pages
76 filings of 10,000 or more individuals
Each links to a page with the full filing, its rank in the state and year, OCR's closing summary where the case is archived, peers, and the modelled cost.
Section NC.6 / All other filings
131 filings below 10,000 individuals
Listed in full from the HHS export, largest first. These filings do not have their own page.
| Covered entity | Type | Individuals | Submitted | Breach type | Location | BA |
|---|---|---|---|---|---|---|
| E-dreamz, Inc. | Business Associate | 9,988 | 8 May 2013 | |||
| Bruce G. Peller, DMD, PA | Healthcare Provider | 9,953 | 25 Jun 2012 | |||
| Klaussner Furniture Industries, Inc. Employee Benefits Plan (through its sponsor, Klaussner Furniture Industries, Inc.) | Health Plan | 9,352 | 5 Apr 2019 | |||
| Gaston Family Health Services dba Kintegra Health | Healthcare Provider | 9,230 | 5 Jan 2026 | |||
| Choice Health Management Services, LLC | Business Associate | 8,692 | 15 Jun 2020 | |||
| Pinehurst Radiology Associates | Healthcare Provider | 8,682 | 19 Mar 2025 | |||
| The University of North Carolina Hospitals | Healthcare Provider | 8,114 | 19 Jul 2021 | |||
| Associated Urologists of North Carolina | Healthcare Provider | 7,300 | 8 Nov 2013 | |||
| Pain Relief Centers PA | Healthcare Provider | 7,000 | 1 Jun 2023 | |||
| Carter and Hoff Dentistry | Healthcare Provider | 7,000 | 1 Jul 2020 | |||
| ABB Inc. Active Employee Group Benefit Plan | Health Plan | 6,877 | 18 Jan 2019 | |||
| Atrium Health at Home | Healthcare Provider | 6,695 | 7 Jun 2022 | |||
| UNC Hospitals | Healthcare Provider | 6,377 | 19 Sep 2025 | |||
| Keith & Fisher, DDS, PA | Healthcare Provider | 6,000 | 21 Apr 2011 | |||
| Carolinas Medical Center - Randolph | Healthcare Provider | 5,600 | 7 Dec 2012 | |||
| Granite Falls Family Medical Care Center | Healthcare Provider | 5,404 | 30 Dec 2021 | |||
| Hospice and Palliative Care Center of Alamance Caswell | Healthcare Provider | 5,370 | 4 Apr 2013 | |||
| City of Charlotte, NC (Health Plan) | Health Plan | 5,220 | 24 May 2010 | |||
| UNC Lenoir Health Care | Healthcare Provider | 5,007 | 17 Jun 2022 | |||
| Feeling Great Sleep Medical Centers | Healthcare Provider | 5,000 | 9 Jan 2021 | |||
| Precision Endodontics of Raleigh | Healthcare Provider | 4,969 | 5 Aug 2025 | |||
| Children's Hope Alliance | Healthcare Provider | 4,564 | 14 Jan 2020 | |||
| Children's Hope Alliance | Business Associate | 4,564 | 3 Dec 2019 | |||
| Aeroflow Inc. | Healthcare Provider | 4,450 | 16 May 2019 | |||
| Alamance Skin Center | Healthcare Provider | 4,080 | 4 Nov 2020 | |||
| Arthritis & Osteoporosis Consultants of the Carolinas | Healthcare Provider | 3,930 | 9 Nov 2018 | |||
| University of North Carolina at Chapel Hill School of Medicine | Healthcare Provider | 3,716 | 12 Nov 2019 | |||
| Atrium Health Wake Forest Baptist | Healthcare Provider | 3,679 | 16 Jun 2023 | |||
| HopeWay Foundation | Healthcare Provider | 3,523 | 20 May 2025 | |||
| North Carolina Department of Health and Human Services | Health Plan | 3,437 | 29 Sep 2025 | |||
| Mountain Laurel DermatologyOpen | Healthcare Provider | 3,324 | 10 Jul 2025 | |||
| UNC Hospitals | Healthcare Provider | 3,142 | 2 Apr 2024 | |||
| Main Street Clinical Associates | Healthcare Provider | 3,031 | 8 Nov 2019 | |||
| Farmville Internal Medicine | Healthcare Provider | 3,000 | 25 Aug 2022 | |||
| The Dermatology Center of Raleigh PA | Healthcare Provider | 3,000 | 5 Jul 2017 | |||
| Pamlico Medical Equipment LLC | Healthcare Provider | 2,917 | 17 Jul 2012 | |||
| The University of North Carolina at Chapel Hill School of Medicine | Healthcare Provider | 2,718 | 19 Jul 2021 | |||
| Meridian Internal Medicine, P.A. | Healthcare Provider | 2,656 | 10 Jul 2024 | |||
| EMS Management and Consultants Inc. | Business Associate | 2,654 | 1 Dec 2023 | |||
| Samaritan's Purse | Health Plan | 2,351 | 28 Mar 2025 | |||
| UNCG Speech and Hearing Center | Healthcare Provider | 2,300 | 9 Aug 2010 | |||
| Jacksonville Children's Multispecialty Clinics/Atlantic Medical Management | Healthcare Provider | 2,224 | 17 Oct 2024 | |||
| OE Enterprises, Inc. | Healthcare Provider | 2,224 | 20 May 2022 | |||
| Liberty Healthcare Group | Healthcare Provider | 2,191 | 16 Jun 2022 | |||
| Alleghany Health | Healthcare Provider | 2,187 | 26 Nov 2025 | |||
| Roush Fenway Keselowski Racing, LLC | Health Plan | 2,160 | 12 Sep 2025 | |||
| Mecklenburg County, North Carolina | Healthcare Provider | 2,000 | 4 May 2017 | |||
| Triumph, LLC | Healthcare Provider | 2,000 | 1 Feb 2012 | |||
| Rick Lawson, Professional Computer Services | Business Associate | 2,000 | 11 Dec 2009 | |||
| Hot Springs Health Program | Healthcare Provider | 1,984 | 6 Jul 2021 | |||
| E-dreamz, Inc. | Business Associate | 1,924 | 10 May 2013 | |||
| Mindful Innovations, PLLC | Healthcare Provider | 1,900 | 20 Jul 2023 | |||
| Cone Health Medical Group | Healthcare Provider | 1,872 | 15 Oct 2014 | |||
| Cone Health Medical Group | Healthcare Provider | 1,872 | 9 Oct 2014 | |||
| Smiles in the Pines | Healthcare Provider | 1,800 | 21 Oct 2024 | |||
| Mary H. Makhlouf, DMD, MS, PA | Healthcare Provider | 1,797 | 22 Mar 2024 | |||
| Mindpath Care Centers, North Carolina, PLLC | Healthcare Provider | 1,781 | 6 May 2022 | |||
| Eventus WholeHealth PLLC | Healthcare Provider | 1,707 | 29 Jul 2022 | |||
| Tranquility Counseling Services | Healthcare Provider | 1,683 | 23 Dec 2013 | |||
| North Carolina Department of Health and Human Services | Health Plan | 1,615 | 19 Oct 2015 | |||
| Carolina Center for Development and Rehabilitation | Healthcare Provider | 1,590 | 30 Jul 2010 | |||
| Laboratory Corporation of America | Healthcare Provider | 1,580 | 1 May 2013 | |||
| Northern Regional Hospital | Healthcare Provider | 1,575 | 15 Mar 2026 | |||
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & RehabilitationOpen | Healthcare Provider | 1,551 | 31 Jul 2026 | |||
| Carolina Oncology Specialists | Healthcare Provider | 1,551 | 16 Oct 2017 | |||
| Charles George Department of Veterans Affairs Medical Center | Healthcare Provider | 1,541 | 11 Jul 2023 | |||
| Blue Cross Blue Shield of North Carolina | Health Plan | 1,530 | 11 Sep 2015 | |||
| Laboratory Corporation of America Holdings dba LabCorp | Healthcare Provider | 1,431 | 8 Sep 2023 | |||
| Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and RehabilitationOpen | Healthcare Provider | 1,397 | 31 Jul 2026 | |||
| Compass Healthcare & Rehab Rowan LLC | Healthcare Provider | 1,381 | 26 Aug 2024 | |||
| Atlantic Brain and Spine, PAOpen | Healthcare Provider | 1,372 | 27 Mar 2026 | |||
| Duke University Health System | Healthcare Provider | 1,370 | 23 Mar 2012 | |||
| North Carolina Department of Health and Human Services - Division of State Operated Health Care Facilities | Healthcare Provider | 1,315 | 8 Nov 2013 | |||
| CaroMont Medical Group | Healthcare Provider | 1,310 | 4 Oct 2013 | |||
| UNC Health Care | Healthcare Provider | 1,298 | 20 Mar 2017 | |||
| New Dimension Group, LLC | Healthcare Provider | 1,275 | 25 Nov 2015 | |||
| Metropolitan Community Health Services, Inc. | Healthcare Provider | 1,263 | 9 Jun 2011 | |||
| Carteret Health Care | Healthcare Provider | 1,235 | 6 Oct 2021 | |||
| Lutheran Services Carolinas | Business Associate | 1,226 | 12 Apr 2022 | |||
| Cape Fear Aesthetics | Healthcare Provider | 1,165 | 23 Apr 2024 | |||
| Radiation Oncology Centers of the Carolinas | Healthcare Provider | 1,116 | 25 Jul 2022 | |||
| Mountain Area Health Education Center dba MAHEC | Healthcare Provider | 1,115 | 14 Apr 2022 | |||
| Kareem Redmond, DDS, PLLC | Healthcare Provider | 1,100 | 3 Aug 2022 | |||
| Vidant Pungo Hospital | Healthcare Provider | 1,100 | 29 Nov 2012 | |||
| Fayetteville VAMC | Healthcare Provider | 1,093 | 14 Jun 2013 | |||
| Psychiatric Associates of North Carolina, Professional Association | Healthcare Provider | 1,081 | 20 Apr 2020 | |||
| InVue Security Products, Inc. Employee Group Health Plan | Health Plan | 1,062 | 12 May 2021 | |||
| Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and RehabilitationOpen | Healthcare Provider | 1,045 | 31 Jul 2026 | |||
| The Presbyterian Homes, Inc. | Healthcare Provider | 1,041 | 9 Dec 2020 | |||
| Children's Hope Alliance | Healthcare Provider | 1,002 | 6 Dec 2019 | |||
| The Outer Banks Hospital | Healthcare Provider | 1,000 | 19 Aug 2016 | |||
| Yadkinville Chiropractic DCPA | Business Associate | 1,000 | 6 Feb 2013 | |||
| Thompson Child & Family Focus | Healthcare Provider | 986 | 3 May 2022 | |||
| Triangle Women's Center | Healthcare Provider | 978 | 7 Jul 2021 | |||
| Blue Cross and Blue Shield of North Carolina | Business Associate | 972 | 27 Aug 2024 | |||
| Town of Apex, North CarolinaOpen | Health Plan | 970 | 30 Mar 2026 | |||
| Iredell-Statesville Schools Board of Eduction | Health Plan | 959 | 3 Feb 2020 | |||
| Haywood County NC | Healthcare Provider | 955 | 9 Feb 2015 | |||
| University of North Carolina Health | Healthcare Provider | 946 | 5 Nov 2021 | |||
| Coastal Cape Fear Eye Associates, P.A. | Healthcare Provider | 925 | 1 Feb 2018 | |||
| Drs. Abdelbaky, Boes, Cameron & Associates of Wake Forest, PLLC | Healthcare Provider | 908 | 15 May 2026 | |||
| American Healthcare Systems LLC dba Randolph Health | Healthcare Provider | 899 | 10 Apr 2024 | |||
| Vidant Health | Healthcare Provider | 897 | 10 Mar 2016 | |||
| Blue Cross Blue Shield of North Carolina | Health Plan | 807 | 11 Sep 2015 | |||
| Diagnostic Radiology & Imaging, LLC | Healthcare Provider | 800 | 5 Apr 2018 | |||
| The University of North Carolina at Chapel Hill - School of Medicine | Healthcare Provider | 799 | 19 Sep 2025 | |||
| Hospice and Palliative Care Charlotte Region dba VIA Health Partners | Healthcare Provider | 777 | 14 Nov 2024 | |||
| Jones Family Practice, P.A. | Healthcare Provider | 742 | 5 May 2017 | |||
| UNC Hospitals | Healthcare Provider | 719 | 19 Oct 2021 | |||
| Tryon Medical Partners, PLLC | Healthcare Provider | 701 | 27 Mar 2020 | |||
| Blue Cross and Blue Shield of North Carolina | Health Plan | 687 | 7 Nov 2013 | |||
| Coastal Horizons Center Inc. | Healthcare Provider | 679 | 25 Oct 2022 | |||
| Piedmont Health Services | Healthcare Provider | 674 | 9 Feb 2021 | |||
| Blue Cross and Blue Shield of North Carolina (Blue Cross NC) | Health Plan | 631 | 11 Oct 2018 | |||
| MED-EL Coproration | Healthcare Provider | 609 | 5 Jul 2013 | |||
| Duke University Health System | Healthcare Provider | 591 | 18 May 2012 | |||
| Henderson County Urgent Care Centers, Inc. dba Margaret R. Pardee Memorial Hospital | Healthcare Provider | 590 | 1 Jul 2019 | |||
| North Carolina Baptist Hospital | Healthcare Provider | 554 | 3 Mar 2010 | |||
| Premier Imaging | Healthcare Provider | 551 | 28 Oct 2011 | |||
| Cornerstone Health Care, PA | Healthcare Provider | 548 | 26 Feb 2014 | |||
| Drs. Abdelbaky, Boes, Cameron & Associates of Cary Park, PLLC | Healthcare Provider | 547 | 15 May 2026 | |||
| North Carolina Department of Health and Human Services | Health Plan | 524 | 13 Nov 2015 | |||
| Carolina Foot & Ankle AssociatesOpen | Healthcare Provider | 501 | 9 Feb 2026 | |||
| Mitchell County Department of Social ServicesOpen | Healthcare Provider | 501 | 19 Dec 2025 | |||
| Vance County Department of Social ServicesOpen | Business Associate | 501 | 22 Aug 2025 | |||
| Family Medical Associates of Raleigh, PAOpen | Healthcare Provider | 500 | 2 Jul 2026 | |||
| Campbell UniversityOpen | Healthcare Provider | 500 | 29 May 2026 | |||
| County of CatawbaOpen | Health Plan | 500 | 19 Nov 2025 | |||
| Andor Labs | Healthcare Provider | 500 | 18 Mar 2024 | |||
| Andor Labs | Healthcare Provider | 500 | 19 Feb 2021 | |||
| Family Healthcare of Lake Norman | Healthcare Provider | 500 | 19 Jun 2018 |
Index / Other states
Every state on the register
98
32
164
92
776
139
144
31
33
463
226
22
29
358
200
98
80
124
66
37
170
241
238
189
55
164
36
60
55
38
174
57
511
19
276
80
120
339
32
41
86
15
196
633
68
15
157
185
47
126
19
Index / Companion schedules
13 HHS breach register
→Hub: every filing, by state, year and entity.
04 Biggest breaches
→Mega-breaches with primary-source cost figures.
Industry / Healthcare
→IBM 2026: $6.64M average, 13 years at #1.
Regulation / HIPAA penalties
→OCR enforcement tiers and the 60-day rule.
11 50-state laws
→Deadline, AG threshold and penalties per state.
Cost / Per record
→Where the per-record model is reliable.
Provenance
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal (breaches affecting 500 or more individuals), retrieved 2026-08-28. Public domain. Individuals affected and dates as reported by the covered entity.
Portal: ocrportal.hhs.gov breach report. Statutory basis: HITECH Act section 13402(e)(4): the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. Breaches affecting fewer than 500 individuals are reported to OCR annually and are not posted, so they are not on this register. Status wording follows the portal's two tabs ("Cases Currently Under Investigation" and "Archive") as of 28 August 2026; a filing moves to the archive when OCR closes the case. Modelled costs on this site are a method applied to the reported count, using IBM Cost of a Data Breach per-record figures, and are never a cost disclosed by the entity.
Corrections: if you represent a listed entity and the portal row has been amended, email [email protected] with the portal entry and we will re-pull the export.