The Oregon Food Bank reported a cybersecurity incident to the Oregon Attorney General's office on April 20, 2026. This breach, which occurred on or about October 24, 2025, highlights the ongoing security challenges even non-profit organizations face in protecting the vast amounts of personal data they handle.
Investigations indicate that the exposed information includes individuals' Full Name, Social Security Number, Date of Birth, Mailing Address, Email Address, Banking and Direct Deposit Information, Donor and Payment History, and Employee Wage and Tax Information. The exposure of such a comprehensive set of personal identifiers and financial details creates significant risks for affected individuals, potentially leading to identity theft, financial fraud, and targeted phishing attempts.
Organizations entrusted with personal data, like the Oregon Food Bank, have a legal responsibility to implement robust security measures to prevent unauthorized access. Data protection laws in Oregon, including the Oregon Consumer Identity Theft Protection Act, require reasonable safeguards. The occurrence of a breach often suggests that these security measures may have been insufficient, potentially violating established legal obligations.
Receiving a data breach notification letter from the Oregon Food Bank means your personal information was directly involved in this security incident. While the immediate impact may not be apparent, the long-term risks associated with exposed data can be substantial. Individuals may face increased vigilance monitoring their accounts, credit reports, and personal information for years to come.
If you received a notification, you have legal rights. Under current class action law, individuals affected by data breaches may be able to pursue compensation for the risks and harms they face, even if they haven't experienced direct financial losses yet. The heightened risk of future identity theft and the time spent safeguarding your information are recognized harms.
Understanding your legal options is an important step. We offer a free case review to help individuals who received a data breach notice from the Oregon Food Bank. This review can help you understand what happened and if you may qualify for legal action, with no out-of-pocket cost to you.