Incident

CareOregon and Health Share of Oregon report data breach


Learn More

CareOregon and Health Share of Oregon report a data breach discovered on October 27, 2025. Attackers broke into their systems and accessed member records. 

The insurers believe the stolen data could lead to medical identity theft. They noted that some information may have already been used to create fraudulent insurance claims. 

The exposed data includes:

  • Full names and dates of birth
  • Health plan information
  • Medicaid and Medicare ID numbers
  • Primary care provider office locations

The number of affected individuals and nature of the attack are not disclosed. 

The insurers started sending notification letters to affected members on December 26, 2025. The insurers have notified law enforcement and are working to secure their systems.

CareOregon and Health Share of Oregon are asking members to review their records for any healthcare services they did not actually receive. Members can also monitor their credit through AnnualCreditReport.com

CareOregon and Health Share of Oregon report data breach