Atrium Health

Disclosed Sep 1, 2020165,000 affectedConfirmed

The covered entity (CE), Atrium Health, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of 165,000 individuals. The ePHI involved included names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website.

What is known

People affected	165,000 (as reported to HHS)
Disclosed	Sep 1, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Atrium Health (Healthcare Provider, NC)

Notices filed

TotalSep 1, 2020

HHS archive165,000 people

Other breaches at Atrium Health

Insider breachInsider exposed names and health records. Reported to the HHS archive.586K affectedHealthcareUSSep 13, 2024 Breach, details not statedBreach notice filed with the California AG, details not stated.HealthcareUSNov 27, 2018

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Atrium Health