Skip to content

One Community Health

Disclosed Nov 22, 20214 years ago39,865 affectedConfirmed

Official notice

The covered entity (CE), One Community Health, reported that it experienced a cybersecurity attack that compromised the protected health information (PHI) of 39,865 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards.

What is known

People affected39,865 (as reported to HHS)
DisclosedNov 22, 2021
DiscoveredApr 19, 2021
HappenedApr 19, 2021
AttackRansomware
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: One Community Healthoag.ca.gov · Official notice
Washington Attorney General breach notice: One Community Healthatg.wa.gov · Official notice
Oregon DOJ breach notice: One Community Healthjustice.oregon.gov · Official notice
HHS OCR breach report (archive, resolved): One Community Health (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CANov 22, 2021
Washington AGresidents of WANov 22, 20217,945
Oregon DOJresidents of ORNov 22, 202139,865
HHS archivetotalNov 22, 202139,865

Other breaches at One Community Health

BreachAffected
Disclosed Jan 2, 2026Jan 28 months agoHacking4,309
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 39865 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), One Community Health, reported that it experienced a cybersecurity attack that compromised the protected health information (PHI) of 39,865 individuals. The PHI involved included names, dates of birth, drivers’ lice · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · discovered: empty to 2021-04-19 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about One Community Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.