State of Oregon
Data Breach on April 15, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | oregon.gov | ||
| Threat Actor | Rhysida | ||
| Date Discovered | Apr 15, 2025 | ||
| Description | The official website of the State of Oregon, providing access to state government services, information, and resources for residents, businesses, and visitors. | ||
| Leak Size | Unknown |
Credential Exposure for oregon.gov
We've indexed 414 @oregon.gov accounts from external breaches, plus 4,707 credentials for oregon.gov itself.
Last checked Aug 16, 2026
| @oregon.gov addresses from external breaches | |
|---|---|
| Third-party breaches | 359 accounts · across 106 breaches · 309 with a plaintext password · most recent Apr 11, 2026 |
| Combo lists | 126 accounts · most recent Aug 15, 2026 |
| Passwords for oregon.gov accounts | |
|---|---|
| Combo lists | 3,874 logins · most recent Aug 15, 2026 |
| Infostealer logs | 1,623 logins · 743 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
State of Oregon was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.