Oregon Cyber Attacks

Infrastructure Affected

Public Safety
Government
Medical
Education
 
Oregon.jpg
 

Public Safety

North Bend Police Department & City of North Bend, Coos County

Breach Type - Ransomware

The World Link

  • Hackers targeted North Bend Police Department with ransomware
  • Ransom note demanded $50,000 in Bitcoin
  • The malware spread to the City of North Bend’s server
  • Two encryption keys were necessary to unlock all systems
  • FBI traced ransomware back to Romania but the identity of the hackers remains unknown
Read More

 

BACK TO TOP

Local Government

Oregon Health Authority & Oregon State Hospital, State

Breach Type - Phishing, Data Breach

Data Breaches

  • A cyber attack had managed to gain access to an employee’s email account that had sensitive information regarding patients
  • It is unknown how or if the data has been manipulated, leaving the state to notify the patients about this potential security breach
  • Over 1.400 people are served by the hospital per year
Read More

 
Oregon Department of Human Services, State

Breach Type - Phishing, Data Breach

Kansas City

  • Oregon Department of Human Services victim of data breach, exposed nearly 1.6 million people's personal information
  • Attack happened in January via phishing link in employees' email
  • Department is unsure exactly how many people were affected, nearly 2 million employee emails were vulnerable during attack
Read More

 
Klamath County

Breach Type - Phishing, Data Breach

Herald and News

  • Two employees at Klamath County fell victim to phishing scheme
  • Phishing email prompted employees to enter credentials into online form
  • Only county employee data affected in breach
Read More

 
City of Medford, Jackson Co.

Breach Type - Other, Data Breach

KDRV

  • Superion's Click2Gov utility bill pay system contains major vulnerability
  • Vulnerability serves as open door for hackers
  • Hackers potentially breach Medford residents' private information
Read More

 
Oregon State Employee

Breach Type - Phishing

Oregon Live

  • Oregon state employee falls victim to phishing scam
  • Malicious link hijacked employee's PC
  • Sent 8 million spam messages from oregon.gov domain
  • Email domain blacklisted by several private email providers
Read More

 
City of Portland, Multnomah County

Breach Type - Hack

Oregon Live

  • Portland's Chief Technology Officer notifies city officials of compromised email accounts
  • Hacking attempts may have been successful
  • City technology staff researching potentially affected data
Read More

 
Klamath County

Breach Type - Phishing

Herald & News

  • County confirmed data breach after Nigerian phishing scam
  • County has stepped up security to combat future attacks
  • Employees credentials were stolen by hacker in Nigeria
Read More

 
Oregon Secretary of State

Breach Type - Hack

US News

  • Russian government tried but failed to access Secretary of State's computer
  • Oregon learned about attempt from US Department of Homeland Security
  • Hack took place during 2016 Election
Read More

 
Oregon Department of Environmental Equality

Breach Type - Hack

Oregon Live

  • Hack poked holes in server
  • No sensitive information believed to be compromised
  • Taken steps to protect its servers/information
Read More

 
Business Registry and Finance

Breach Type - Hack

Route Fifty

  • Websites hacked in 2014
  • Since then improvements auditing structural gaps have been made
  • A Center for Cyber Excellence has been established
Read More

 
Department of Fish and Wildlife

Breach Type - Hack

KTVL

  • Breach of online system to purchase fishing/hunting license
  • Investigating whether personal info was compromised
  • System has been shut down until further notice
Read More

 
BACK TO TOP

Medical

Family Tree Relief Nursery, Linn County

Breach Type - Ransomware

Oregon Live

  • Organization’s computer hacked with ransomware
  • The incident prevented staff from accessing client information
  • 2,000 clients notified by mail that unauthorized persons accessed computer programs
Read More

 
Legacy Health, Multnomah County

Breach Type - Phishing, Data Breach

Oregon Live

  • Legacy Health employees fall victim to email phishing scheme
  • 38,000 patients potentially affected by data breach
  • PHI & financial data may be at risk
Read More

 
Care Partners Hospice and Palliative, Hillsboro – Washington Co.

Breach Type - Hack

Hillsboro Tribune

  • Hackers targeted Washington Co. Medical practice
  • Credentials stolen from employee email account
  • 600 patients potentially compromised in the breach
Read More

 
The Oregon Clinic, Multnomah County

Breach Type - Hack

DataBreaches

  • Hackers infiltrated an employee email account
  • Private information of patients possibly exposed to hacker
  • The Oregon Clinic advises those potentially affected to monitor their personal data
Read More

 
Southwest Portland Dental

Breach Type - Accidental Data Breach

Data Breaches

  • Unauthorized individuals gained access to Dental network through a trusted third-party vendor
  • Affected site was used to transfer data
  • No evidence surfaced of unauthorized access/misuse of info
  • Southwest Portland Dental notified patients that private data could be exposed
  • Reported to law enforcement and investigation is ongoing
Read More

 
BACK TO TOP

Education

Oregon State University, Benton County

Breach Type - Phishing, Data Breach

Oregon State

  • Over 500 student records and family records were exposed following a cyber attack
  • An employee email account was compromised and exploited as hundreds of phishing emails were sent from this affected account
  • Upon investigation it was realized that this account had the private information from many students and their family
Read More

 
Lake Oswego School District, Clackamas County

Breach Type - Phishing/Other

KOIN 6

  • Hackers target Lake Oswego School District Twitter page & employee email account
  • Employee email compromised by hackers & used to distribute spam emails to students of district
  • Inappropriate tweets launched by hackers via Lake Oswego District Twitter page
  • District acted to warn students and deactivate Twitter account
Read More

 
Roseburg Public Schools District, Douglas County

Breach Type - Ransomware

NR Today

  • Roseburg Public Schools District falls victim to ransomware attack
  • Malware blocked district's email, website, and software
  • District took steps to neutralize attack
  • No personal data compromised
Read More

 
Southern Oregon University

Breach Type - Phishing

Tripwire

  • Southern Oregon University falls victim to Business Email Compromise (BEC) scam
  • Hackers posed as trusted construction vendor
  • University sent $1.9M to hackers
Read More

 
Redmond School District

Breach Type - Ransomware

KTVZ

  • Hacker poses as superintendent in a spear-phishing scheme
  • Employee emailed all W-2 information to hacker
  • No immediate misuse of employee information
  • District notified potentially affected individuals
Read More

 
Grant County Education Service District

Breach Type - Ransomware

Blue Mountain Eagle

  • Ransomware encrypts Grant County Education Service District through malicious email attachment
  • Attack shutdown county/school emails, & internet operations
  • Ransomware identified as .LOL! variant
  • District's anti-virus and security software were not enough to stop attack
Read More

 

BACK TO TOP