Health Share of Oregon and CareOregon notify members of data breach

According to Columbia Pacific CCO, a breach affecting members of CareOregon and Health Share Oregon was disclosed in a notice titled “Alert: Some of your information was viewed without permission.” The notice states that on 27 October 2025, one or more people viewed your information without permission. The data that might have been viewed includes first and last name, date of birth, health plan information, Medicaid ID number, Medicare ID number, and primary care provider office.

CareOregon and Health Share Oregon reported the incident to law enforcement, and the notice suggests the motivation may have been to acquire data to create fake insurance claims, though it is not known if individuals’ information was used for claims. They also note that neither Social Security numbers nor financial information were viewed, and they state they do not offer any complimentary monitoring assistance.