CareOregon data breach
CareOregon has reported a data incident that occurred in May 2025, potentially affecting individuals in Oregon. The company filed notice of this breach in December 2025, and an investigation into the scope and impact of the exposure of personal information is currently underway. Individuals who receive a notification should understand the potential risks and their options.
Docket sheet
- Company
- CareOregon
- Venue
- OR Attorney General
- Filed
- December 26, 2025
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredMay 25, 2025
Date of the incident as stated in the filing.
- 2
Reported to the OR Attorney GeneralDecember 26, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
CareOregon, an organization based in Oregon, has disclosed a data breach that originated on May 25, 2025. While the specific nature of the incident has not been fully detailed, it led to the potential exposure of personal information belonging to its constituents. The company officially reported this security event on December 26, 2025.
The investigation into the CareOregon data breach is ongoing. This means that authorities and the company are still working to understand the full extent of the incident, including precisely what information was compromised and how many individuals may have been affected. Updates will likely be provided as more details become clear.
If you have received a notification letter from CareOregon regarding this incident, it is crucial to review the letter carefully. It should contain specific instructions and details relevant to your situation. Even if the letter doesn't provide all the answers, it confirms you may be among those impacted.
As a general best practice, remain vigilant for any unusual activity related to your accounts. This includes monitoring financial statements and other personal records for transactions or inquiries you do not recognize. Consider placing a fraud alert on your credit files to make it more difficult for unauthorized parties to open new accounts in your name.
Protecting your personal information is a continuous effort. If you are concerned about your data's security following this breach, or if you believe you have suffered harm due to this incident, you may want to explore your options. A legal professional specializing in data privacy can help assess your individual circumstances.
Individuals who received a data breach notification letter from CareOregon may qualify for a free review of their case. This initial consultation can help you understand the potential implications of this data breach and whether you have grounds to pursue a claim.
If a notification letter about this breach reached you, see every OR data breach on file or browse all cases.
Other OR docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.