Oregon health plans breached; member data exposed, but no SSNs or financial info compromised.

On October 27, 2025, multiple Oregon health care organizations—CareOregon, Jackson Care Connect, and Columbia Pacific CCO—discovered unauthorized access to member data, including names, birth dates, health plan details, and Medicare/Medicaid IDs, but no Social Security numbers or financial information were compromised. While no financial accounts were opened, there is a risk that data could be used to file fraudulent insurance claims. Members may receive letters listing services they should have received; if any were not provided, they should report it. No charges will be issued for falsely claimed services. Organizations urge members to monitor accounts and obtain free annual credit reports at annualcreditreport.com or by calling 877-322-8228. Questions can be directed to 888-367-0355, weekdays 9 a.m. to 9 p.m. Eastern Time, excluding major holidays.