DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

UNC Hospitals Notifies Patients that Former Employee Used Patient Information for Personal Gain

Posted on October 22, 2021 by Dissent

CHAPEL HILL, N.C.–(BUSINESS WIRE)–UNC Hospitals announced that it has mailed letters to 719 patients whose information may be at risk for identity theft.

On September 10, 2021, UNC Hospitals learned that one of its employees was using patient information for personal financial gain. The employee was responsible for handling payments from patients for services rendered by certain clinics of UNC Hospitals. The now former employee had access to patient demographic information including Social Security numbers, as well as copies of patient driver’s licenses and insurance cards.

UNC Hospitals has confirmed that this former employee used some patients’ demographic and financial information to fraudulently obtain goods or services.

UNC Hospitals is making written notification by mail to all patients who might have been affected by this incident. The notification letters outline how this occurred and offers all patients receiving a notification letter one year of free credit monitoring.

UNC Hospitals Police Department has initiated a criminal investigation into this matter, and patients who receive a letter are directed to contact the UNC Hospitals Police Department at 984-974-0462 if they have questions or suspect they have been a victim of financial fraud.

UNC Hospitals regrets any concern or inconvenience this incident may cause. In response to this incident, they have taken action in accordance with policy and reviewed the payment process to ensure internal controls are effective and appropriate. If patients have any questions about this incident, they should call the UNC Health Privacy Office at 984-974-1069, Monday through Friday, between 8:30 a.m. and 5:00 p.m., Eastern Time.

Source: BusinessWire


Related:

  • JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
  • Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident
  • Heritage Provider Network $49.99M Class Action Settlement
  • Integris Health Agrees to $30 Million Settlement Over 2023 Data Breach
  • They were victims of a massive data breach in 2009. Interior Health denied it for a decade.
  • Watsonville Community Hospital had a data breach -- or two. It would be helpful to know which.
Category: Health DataID TheftInsider

Post navigation

← Governments turn tables on ransomware gang REvil by pushing it offline
PA: Corry School District says ransomware attack may have exposed current — and very old — data on staff, students →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.