Morrison Child and Family Services
Disclosed Oct 20, 20232 years ago2,044 affectedConfirmed
The covered entity (CE), Morrison Child and Family Services, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,044 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, diagnoses, and medications. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 2,044 (as reported to HHS) |
|---|---|
| Disclosed | Oct 20, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Morrison Child and Family Servicesjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Morrison Child and Family Services (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 20, 2023 | 2,044 |
| Oregon DOJresidents of OR | Jun 27, 2024 | 2,042 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2044 · backfill source
- 2026-09-25 · disclosed: 2024-06-27 to 2023-10-20 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Morrison Child and Family Services, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,044 individuals. The PHI involved included names, dates of birth, Social S · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.