University of North Carolina at Chapel Hill and UNC Hospitals Data Breach Lawsuit Investigation

File Your Claim Now

Dapeer Law, P.A., a top-rated class action law firm, is investigating the University of North Carolina at Chapel Hill and UNC Hospitals data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

UNC-Chapel Hill & UNC Hospitals Data Breach Lawsuit Investigation

Q: Is Social Security information definitely exposed?

UNC-Chapel Hill’s notice states Social Security numbers may have been included in the compromised mailbox. Confirm the exact data impacted by reviewing your individual notification letter.

Were you treated or employed by UNC-Chapel Hill or UNC Hospitals? A recent email-phishing attack has potentially exposed the most sensitive details of more than 7,100 people. Find out if you can file a claim today

What Happened?

On July 24, 2025, University of North Carolina at Chapel Hill (UNC-Chapel Hill) and UNC Hospitals detected that an unauthorized party had accessed a School of Medicine faculty email account following a sophisticated phishing attempt. The institutions immediately launched an internal investigation and cybersecurity review to understand the scope of the intrusion.

By September 19, 2025, officials confirmed that personally identifiable information (PII) and protected health information (PHI) contained in that single mailbox were exposed. A public notice was posted on the School of Medicine’s website the same day, and notification letters began arriving in mailboxes shortly thereafter.

Information Reportedly Exposed

Data elements vary by individual, but the review indicates the breach may have included one or more of the following:

Name
Social Security number
Driver’s license number
Financial account information
Date of birth
Medical details such as diagnoses, treatment data, or research-study participation
Health-insurance ID number

Your Legal Options

Under federal and North Carolina consumer-protection laws, organizations handling medical data must deploy reasonable cybersecurity safeguards. When those safeguards fail, affected individuals may be entitled to:

Reimbursement for out-of-pocket expenses (credit monitoring, identity restoration, etc.)
Compensation for time spent remedying fraud or medical-identity theft
Statutory damages where available
Enhanced credit-monitoring or identity-theft protection services

Class action investigations like this one help determine whether UNC-Chapel Hill and UNC Hospitals met their legal duties and, if not, how victims can pursue recovery.

Steps to Protect Yourself Now

Enroll in the free credit-monitoring service offered in your notification letter.
Place fraud alerts or security freezes with the major credit bureaus.
Monitor explanation-of-benefits statements and medical bills for unfamiliar charges.
Change passwords and enable multi-factor authentication on key accounts.
Report any suspected identity theft to the Federal Trade Commission and local law enforcement.

How to Join the UNC-Chapel Hill & UNC Hospitals Data Breach Lawsuit

If you received a breach notice dated September 19, 2025—or believe your data was processed by either institution—complete our secure form to discuss your rights with an attorney. There is no cost to inquire, and you pay nothing unless compensation is recovered on your behalf.

Start Your Free Case Review

Frequently Asked Questions

What caused the UNC-Chapel Hill & UNC Hospitals data breach?

An employee’s email account at the School of Medicine was compromised through a phishing attack, allowing an unauthorized individual to access stored messages and attachments.

How many people are impacted by the UNC-Chapel Hill & UNC Hospitals breach?

The institutions reported the incident to the U.S. Department of Health and Human Services as affecting 7,116 individuals.

Is Social Security information definitely exposed?

UNC-Chapel Hill’s notice states Social Security numbers may have been included in the compromised mailbox. Confirm the exact data impacted by reviewing your individual notification letter.

Does UNC provide free credit monitoring?

Yes. Affected individuals are offered complimentary credit-monitoring services. Follow enrollment instructions in your mailed notice.

Can I sue UNC-Chapel Hill or UNC Hospitals for this breach?

Potentially. Victims can join a class action or pursue individual claims seeking monetary damages and enhanced protective services. Eligibility depends on your specific data exposure and resulting harm.

How long do I have to take legal action?

Deadlines vary by claim type and state law. Acting promptly preserves your rights and evidence, so consult an attorney as soon as possible after receiving a notice.