Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
North Carolina Breaches Fuel Privacy Debate
Coverage from WRAL, North Carolina Attorney General, and others
Articles
3
Active Days
35
The Topic
North Carolina reported 2,349 data breaches in 2025 affecting approximately 9.3 million residents, with ransomware, email compromise, and education-sector incidents prominent in the reporting. The scale of the breaches, including the PowerSchool incident, is driving increased attention to multifactor authentication, vendor security, staff training, enforcement, and how institutions collect and share personal data. Residents and advocates are also questioning whether expanded identity-verification requirements could create additional concentrations of sensitive information without sufficient transparency or safeguards.
First Article: 04/15/26
Latest Article: 05/19/26
Summary
- North Carolina reported 2,349 data breaches in 2025 affecting 9,275,938 residents, although some individuals were counted in multiple incidents.
- Ransomware and email-related breaches were major reported categories, with email breach reports rising from 492 to 570 in 2025.
- Education systems and third-party vendors remain a prominent exposure surface, including incidents involving Canvas and PowerSchool.
- The PowerSchool breach potentially exposed data tied to 62.4 million students and teachers nationwide, including about 4 million North Carolinians; the state investigation remains ongoing.
- State officials are emphasizing multifactor authentication, phishing training, patching, offline backups, access controls, and annual contractor-security reviews.
- Community advocates are seeking clearer breach-notification timelines and more transparency about agency data sharing with vendors.
- Expanded identity verification is creating a policy tension between fraud prevention and the risks of retaining additional sensitive personal data.
History
The story now adds more concrete detail about the breach pattern and shifts from general privacy concerns toward active policy debate over identity verification and data-sharing safeguards. It also strengthens the education-sector angle by naming additional vendor involvement and a larger nationwide PowerSchool impact still under investigation.
Featured
Timeline: 35 Days
Hover over any logo to see coverage summary, click for full article.