CareOregon notice of data breach

PORTLAND, Ore., Oct. 06, 2022 (GLOBE NEWSWIRE) -- CareOregon recently discovered an incident involving disclosure of personal information for a subset of current members. The incident occurred on Aug. 9, 2022, when we learned that marketing letters were sent out to the wrong addresses of some CareOregon members and contained Protected Health Information (PHI). 8,022 current members were impacted by this data breach—including 5,589 CareOregon members, 1,849 Jackson Care Connect members, and 584 Columbia Pacific CCO members. 

Impacted individuals have been notified of this data breach, which included member name and Medicaid ID number. CareOregon investigated this incident. Based on this review, we believe that this incident poses a low risk of fraud and/or identity theft.  

Additionally, the investigation confirmed that the organization has the correct policies and procedures in place to address this type of breach and those processes are reviewed yearly. We’ve provided additional training to the employee to make sure this doesn’t happen again. 

We encourage individuals who are concerned about impacts of this breach to:  

    • Review their account statements Please review your account statements and credit reports closely. Look for suspicious activity on your accounts. If you find any, call the financial company where you have your account. Tell them right away. Also, report it to law enforcement, your state attorney general, and/or the Federal Trade Commission (FTC). 
    • Review their credit report You may get a free copy of your credit report from each of the three major credit reporting agencies. You can get them once every 12 months. Find out more at or call toll-free 877-322-8228.  You also can contact them: 


P.O. Box 1000

Chester, PA 19016


P.O. Box 9532

Allen, TX 75013


P.O. Box 740241

Atlanta, GA 30374-0241



  • Set a Fraud Alert If you have concerns, you can also place a fraud alert on your credit report.  This is free. It will stay on your credit file for at least 90 days. This tells creditors of possible fraud activity in your report. It also asks creditors to contact you before setting up an account in your name.  To place a fraud alert on your credit report, contact any of the three agencies listed above. Learn more at  

At CareOregon, we are committed to the highest standards of data safety and take our responsibility with personal information very seriously. Impacted individuals may reach our team at 888-712-3258 or TTY 711. 


Contact Data