North Carolina Board Data Breach Affects Thousands

Published

July 9, 2025

Updated

July 15, 2025

North Carolina Board Data Breach Affects Thousands

North Carolina Board of Cosmetic Art Examin

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

The North Carolina Board of Cosmetic Art Examiners experienced a data breach that affected 28,018 individuals across the United States. On Nov. 27, 2024, NCBCAE discovered suspicious activity within its systems. An investigation revealed an unauthorized actor gained access to certain email accounts between Oct. 31, 2024 and Nov. 27, 2024.

On June 17, 2025, it was determined that both personally identifiable information (PII) and protected health information (PHI) may have been compromised in the data breach. Exposed information includes Social Security numbers, names, driver’s license or state identification numbers, account numbers, routing numbers, payment card numbers, passport numbers, biometric data, medical information, health insurance information and taxpayer identification numbers.

This incident is considered severe due to the level of data involved. North Carolina Board of Cosmetic Art Examiners began notifying affected individuals on July 8, 2025 and published a Notice of Security Incident on its own website.

The data breach was also disclosed to the Maine, Massachusetts and Vermont Attorney Generals' offices beginning on July 8, 2025. Affected individuals include eight Maine residents.

North Carolina Board of Cosmetic Art Examiners’ response

In addition to required state and federal disclosures, NCBCAE is offering free credit monitoring and identity protection services to impacted individuals.

If you receive a notice about this breach from North Carolina Board of Cosmetic Art Examiners, you may want to:

Sign up for the free IDX credit monitoring and identity protection services offered by NCBCAE.
Monitor financial accounts and credit reports for signs of identity theft.
Consider placing fraud alerts or credit freezes with major credit bureaus.
Be cautious of unsolicited emails or phone calls requesting personal information.

About North Carolina Board of Cosmetic Art Examiners

More information about the North Carolina Board of Cosmetic Art Examiners can be found on their official website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.