Oregon Anesthesiology Group

Disclosed Dec 6, 2021750,500 affectedConfirmed

The covered entity (CE), Oregon Anesthesiology Group, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 750,500 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, and claims information. The CE notified HHS, affected individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards to better protect PHI.

What is known

People affected	750,500 (as reported to HHS)
Disclosed	Dec 6, 2021
Discovered	Jul 11, 2021
Happened	Jul 3, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Oregon Anesthesiology Group

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Oregon Anesthesiology Group (Healthcare Provider, OR)

Notices filed

Residents of ORDec 6, 2021

Oregon DOJ750,500 people

TotalDec 6, 2021

HHS archive750,500 people

History of this record

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 750500by backfillSource

summary2026-09-25

empty to The covered entity (CE), Oregon Anesthesiology Group, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 750,500 individuals. The PHI involved included names, addresses, dates of birth, by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.

Everything about Oregon Anesthesiology Group