Yamhill Community Care (YCCO) data breach
Yamhill Community Care (YCCO), an Oregon healthcare entity, formally reported a data security incident on October 23, 2025. This event involved unauthorized access to their systems, potentially exposing personal information for those who received a notification letter. Affected individuals should understand the incident's implications for their personal data.
Docket sheet
- Company
- Yamhill Community Care (YCCO)
- Venue
- Oregon Attorney General
- Filed
- October 23, 2025
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredAugust 29, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralOctober 23, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
Yamhill Community Care (YCCO), a healthcare provider managing Oregon Health Plan benefits, formally reported a data security incident to the Oregon Attorney General on October 23, 2025. The breach, which involved unauthorized access to their systems, was discovered on August 29, 2025. YCCO is currently investigating the full scope of this incident.
According to the official filing, the incident potentially involved unauthorized access to personal information maintained by YCCO. While the specific categories of data were not detailed in the public report, healthcare organizations like YCCO typically manage sensitive patient records and related identifiers.
If you have received a formal data breach notification letter from Yamhill Community Care, it indicates that your personal information was identified as potentially compromised during this event. These letters are sent directly to individuals whose data was involved, and they often contain specific instructions or recommendations from the company.
As a recipient of such a notice, it is advisable to carefully read all information provided in your letter. Consider taking general protective measures, such as remaining alert for any unusual activity related to your accounts or identity. Be cautious of unsolicited communications, especially those requesting personal details.
Navigating the aftermath of a data breach can raise many questions about your rights and potential recourse. If you are among those impacted by this YCCO incident, you may benefit from discussing your situation with an attorney to understand your options.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.