CareOregon data breach

Clerk's notes

On December 26, 2025, CareOregon formally reported a data breach to the Oregon Attorney General. This incident, which occurred on or about May 25, 2025, is currently under investigation by authorities. Individuals who received direct notification from CareOregon are considered impacted by this security event.

If you received a data breach notification letter from CareOregon, it signifies that your personal information was potentially compromised. While the specific categories of data involved have not been publicly detailed, such letters are issued when sensitive information is believed to have been exposed to unauthorized individuals.

The purpose of these notifications is to alert you that unauthorized parties may have gained access to your data. Understanding the scope of the exposure is critical, as it informs the proactive steps you should take to protect yourself from potential misuse of your information.

Individuals should closely review the guidance provided in their notification letter. General protective measures include monitoring all personal accounts for suspicious activity, being vigilant against unexpected communications, and considering security freezes where appropriate. Update passwords for online services and exercise caution with unsolicited requests for information.

The ongoing investigation into the CareOregon data breach seeks to determine the full extent of the incident and identify any responsible parties. Regulatory oversight ensures that companies adhere to data protection laws and properly inform affected individuals of risks.

If you received a data breach notification from CareOregon regarding this 2025 incident, you may be eligible to discuss your situation with a legal professional. A free case review can help you understand your potential options without any obligation or promise of legal outcome.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.