Oregon Endodontic Group
Disclosed Apr 2, 20197 years ago2,952 affectedConfirmed
The covered entity (CE), Oregon Endodontic Group, reported that employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 2,952 individuals. The ePHI involved included names, birthdates, diagnoses, health insurance information, drivers’ license numbers, financial information, and Social Security numbers. The CE notified HHS, affected individuals, and the media. Upon discovery of the breach, the CE implemented additional administrative, technical, and physical safeguards and retrained its staff on the proper methods of identifying fraudulent email communications. During the investigation, OCR provided the CE with technical assistance.
What is known
| People affected | 2,952 (as reported to HHS) |
|---|---|
| Disclosed | Apr 2, 2019 |
| Discovered | Feb 11, 2019 |
| Happened | Nov 9, 2018 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Oregon Endodontic Groupjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Oregon Endodontic Group (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Oregon DOJresidents of OR | Apr 2, 2019 | 2,952 |
| HHS archivetotal | Apr 2, 2019 | 2,952 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2952 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Oregon Endodontic Group, reported that employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 2,952 individuals. The ePHI involved included names, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.