Grayback Forestry, Inc. data breach
Grayback Forestry, Inc. reported a data breach to Oregon authorities on March 13, 2026, stemming from an incident on January 5, 2026. This compromise exposed sensitive personal and financial details, including Social Security Numbers and Direct Deposit Account Details, for many individuals, raising significant identity theft and financial fraud concerns.
Docket sheet
- Company
- Grayback Forestry, Inc.
- Venue
- Oregon Attorney General
- Filed
- March 13, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJanuary 5, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralMarch 13, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Mailing Address
- Phone Number
Clerk's notes
Grayback Forestry, Inc., a prominent wildland firefighting contractor, filed a data breach report with Oregon officials on March 13, 2026. This notification pertains to a security incident that occurred on January 5, 2026. The investigation into the scope and cause of this breach remains under monitoring, as further details continue to emerge regarding the integrity of Grayback Forestry's administrative systems.
The breach exposed a range of highly sensitive personal and financial data. The information reported compromised includes Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Phone Number. The exposure of these core identifiers creates a direct pathway for potential identity theft, financial fraud, and unauthorized account access for affected individuals.
Organizations like Grayback Forestry, which manage extensive employee and contractor data, have a legal obligation to implement robust security measures to protect this sensitive information. A security incident of this nature suggests potential vulnerabilities in the company's data protection protocols. When such crucial data, particularly Social Security Numbers and banking details, are compromised, individuals face a prolonged risk of malicious use that cannot be easily mitigated by changing account numbers or identifiers.
If you received a data breach notification letter from Grayback Forestry, Inc., it formally confirms that your personal information was exposed. This letter provides you with the legal standing necessary to consider your options. Individuals who have been notified may be entitled to seek recourse through legal action to hold the company accountable for potential negligence in safeguarding their data.
Understanding your rights and options in the wake of a data breach is crucial. We offer a no-cost case review to help affected individuals assess their situation and determine the appropriate next steps. This review can help you understand how this breach might affect you and explore any available legal avenues without any upfront financial commitment.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.