Richard J. Caron Foundation

Disclosed Aug 17, 202022,718 affectedConfirmed

The covered entity (CE), Richard J. Caron Foundation, reported that its business associate (BA) experienced a ransomware attack affecting the electronic protected health information (ePHI) of 22,817 individuals. The ePHI involved included names, addresses, dates of birth, email addresses, and donor information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected	22,718 (as reported to HHS)
Disclosed	Aug 17, 2020
Discovered	Jul 16, 2020
Happened	Feb 7, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Nonprofit · US
Status	Confirmed

Sources

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Richard J. Caron Foundation

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Richard J. Caron Foundation (Healthcare Provider, PA)

Notices filed

TotalAug 17, 2020

HHS archive22,718 people

Residents of ORAug 20, 2020

Oregon DOJ22,296 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 22718by backfillSource

disclosed2026-09-25

2020-08-20 to 2020-08-17by backfillSource

summary2026-09-25

empty to The covered entity (CE), Richard J. Caron Foundation, reported that its business associate (BA) experienced a ransomware attack affecting the electronic protected health information (ePHI) of 22,817 individuals. The ePHI involved included nby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.

Everything about Richard J. Caron Foundation