The Oregon Clinic
ent_fe0e50f67b6e8941f451b8d0
Disclosures
3
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
64,487
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Oregon Clinic
- Normalized
- the oregon clinic— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- Oregon State AGas victim2018-05-24
The Oregon Clinic reported a data breach to the Oregon Attorney General. The breach was reported on 2018-05-24. 64,487 individuals were affected.
- Montana State AGas victim2018-05-23
The Oregon Clinic notified Montana AG of a March 9, 2018 incident where an unauthorized third party accessed a single email account. The breach potentially exposed PHI, names, DOBs, and medical info. The clinic disabled access, engaged forensic experts, and offered 12 months of credit monitoring.
- OREGONHHS OCRas victim2018-05-08
On March 9, 2018, The Oregon Clinic, P.C. (OR) discovered that an unauthorized third party accessed an employee email account via a phishing attack, exposing ePHI (demographic and clinical information) of 64,487 individuals. Breached information located on Email. The CE notified HHS, affected individuals, and media, posted substitute notice, revised policies and procedures, and implemented MFA for its EHR system. OCR obtained assurances of corrective action.