Hack of Oregon Department of Environmental Quality exposes personal data
The Oregon Department of Environmental Quality in the US was hit by a cyberattack that exposed the personal information of thousands of people. In April 2025, millions of files were published after the attack, and allegations arose that the stolen data had been posted on the dark web. In January 2026, it also emerged that the agency had not informed the public of the personal data breach.
Key facts
- Affected organization
- Oregon Department of Environmental Quality
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of thousands of people
- Cause / method
- External cyberattack
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The publication of millions of files after the cyberattack and allegations that the stolen data was circulating on the dark web were reported.
- The leak of thousands of people's personal information and the agency's failure to notify the public came to light.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.