From ClingantryAI Health Regulator News

A North Carolina business associate, Networking Technology, Inc., reported a hacking/IT incident to HHS OCR on May 29, 2026. The filing indicates that 353,844 individuals were affected by the unauthorized access to data stored on a network server. Because the entity is a business associate, your organization may be indirectly impacted if you rely on their services for protected health information processing. Review your vendor contracts and incident response plans to ensure you are prepared for potential downstream notifications or service disruptions. This filing date reflects when the report was submitted to the regulator, not necessarily when the breach occurred or was discovered.

Coastal Carolina Health Care, PA in North Carolina has reported a significant data breach to the Department of Health and Human Services. The incident involved a hacking or IT incident targeting a network server. This breach affects 110,304 individuals, exposing their protected health information. The report was submitted on March 24, 2026. Hospital administrators should review their own cybersecurity protocols to ensure similar vulnerabilities are not present in their systems. While this specific incident is contained to Coastal Carolina Health Care, it serves as a reminder of the ongoing risks posed by cyber threats to healthcare networks. Ensure your IT teams are monitoring for unusual activity and that incident response plans are up to date.

A hacking/IT incident at Hillcrest Convalescent Center, Inc., a healthcare provider in North Carolina, has been reported to HHS OCR. The filing, submitted on March 4, 2025, indicates that data stored on a network server was compromised. This breach affects 106,194 individuals. Because the source record provides no web description, the specific types of data involved are not detailed here. Healthcare administrators should note this incident as a reminder to verify their own incident response plans and server security protocols. This is a confirmed report from a covered entity classified as a healthcare provider.

A North Carolina eye care provider, Asheville Eye Associates, PLLC, filed a breach report with HHS OCR on January 17, 2025. The filing describes a hacking/IT incident that compromised data stored on a network server. The breach affects 204,984 individuals. As a healthcare provider, the entity is a covered entity under HIPAA. This submission date reflects when the report was sent to regulators, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current.