Oregon Food Bank data breach
The Oregon Food Bank reported a data security incident on April 20, 2026, stemming from unauthorized access that occurred in October 2025. This breach reportedly compromised various personal and financial details belonging to individuals associated with the organization. Affected persons who received a notification letter may be at increased risk of identity theft and financial fraud.
Docket sheet
- Company
- Oregon Food Bank
- Venue
- Oregon Attorney General
- Filed
- April 20, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredOctober 24, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralApril 20, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Email Address
- Banking and Direct Deposit Information
- Donor and Payment History
- Employee Wage and Tax Information
Clerk's notes
On April 20, 2026, the Oregon Food Bank formally reported a data security incident to the Oregon Attorney General. This filing pertains to an unauthorized access event that occurred on October 24, 2025, involving data held by the prominent hunger-relief organization. The breach has prompted regulatory monitoring and raises concerns for those whose information was entrusted to the food bank.
The information reportedly exposed in this breach includes Full Name, Social Security Number, Date of Birth, Mailing Address, Email Address, Banking and Direct Deposit Information, Donor and Payment History, and Employee Wage and Tax Information. This comprehensive collection of personal and financial details could impact various individuals associated with the organization, including employees, donors, and program participants.
Such a broad compromise of sensitive data carries significant risks for affected individuals. The exposure of Social Security Numbers, for instance, can lead to long-term threats of identity theft, fraudulent credit applications, and even tax fraud. Similarly, compromised banking details and donor histories open pathways for financial fraud and targeted scams that leverage personal knowledge.
Organizations like the Oregon Food Bank, which collect and store substantial volumes of personal data, have a legal obligation to protect this information under Oregon state laws, including the Oregon Consumer Identity Theft Protection Act. A data breach suggests that the security measures in place may not have been sufficient to prevent unauthorized access, potentially constituting a lapse in their duty of care.
If you have received an official data breach notification letter from the Oregon Food Bank, it confirms that your personal information was part of this incident. Understanding your legal options and potential avenues for recovery is crucial. Individuals affected by this breach may be entitled to compensation for incurred damages and increased risks. We are currently reviewing these claims and invite you to request a free, no-obligation case review to discuss your situation.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.