UnknownHigh
Outcomes
bd_a6e85691ffe67ace · schema v1 · pii pii-v1
Full breach record for Outcomes →Outcomes One, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-09-23. The breach occurred during 7/1/2025 - 7/1/2025. The breach was discovered on 7/25/2025. 149,094 individuals were affected. Notice was sent on 9/23/2025.
Oregon clock✗ OR AG >45d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_25a352c6de9ebeffWashington State AGfiled 2025-09-23Verified
- bd_30e22ddaec24070eCalifornia State AGfiled 2025-09-23Verified
- bd_bfd803f20d5ab6cdHHS OCRfiled 2025-09-23Verified
- bd_d5b332c2531136fbMontana State AGfiled 2025-09-23Verified
Show 2 more filings ↓Show fewer ↑up to 31d gap
- bd_1534c283b261f9d6California State AGfiled 2025-10-23(30d gap)Verified
- bd_a6f792d784d84ba3Texas State AGfiled 2025-10-24(31d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 23, 2025
- Raw hash
- b6857924691090e5d8a5b30eab311a3164266cb13a9a75e0f26a859ec21cca94
Reporting entity
- Name
- Outcomesnorm: outcomes
- Domain
- outcomes.com
Victim entity
- Name
- Outcomesnorm: outcomes
- Domain
- outcomes.com
Incident
- Discovered
- Jul 25, 2025
- Materiality determined
- —
- Notification sent
- Sep 23, 2025
- Affected individuals
- 149,094
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.