North Carolina Faces Record Data Breaches as New Axios Cyber Threat Emerges North Carolina experienced a historic surge in data breaches in 2025, with 2,349 incidents reported the highest number ever recorded in the state. According to the North Carolina Department of Justice, these breaches exposed the personal information of nearly 9.3 million residents. A new cybersecurity threat has now emerged, targeting Axios, a widely used open-source JavaScript library. On March 31, hackers released malicious versions of an Axios update, potentially infecting systems that downloaded the compromised code. Given Axios’s prevalence in websites, applications, and internal tools, the risk of widespread impact is significant. North Carolina Attorney General Jeff Jackson has called on businesses to act swiftly. Organizations are advised to check for Axios usage, isolate affected systems, verify trusted versions, and review logs for suspicious activity. Compromised credentials or access tokens should be revoked and reissued, and breached systems may need to be rebuilt from clean backups. Under state law, businesses must notify affected individuals and report breaches to the Department of Justice’s Consumer Protection Division if personal data is exposed. The incident underscores the growing frequency of cyberattacks and the need for rapid response to mitigate damage.