Roseburg Therapy dba Stronger Oregon disclosed a data security incident to the Oregon Attorney General on October 19, 2026, triggering legally mandated notification letters. If you are one of the people who received Roseburg Therapy dba Stronger Oregon's letter, your data may have been exposed and you could be entitled to compensation.
The Oregon Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Roseburg Therapy dba Stronger Oregon's filing with the Oregon Attorney General lists these compromised data types:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Roseburg Therapy, doing business as Stronger Oregon, operates as a critical mental health and behavioral therapy provider within the Pacific Northwest. In this capacity, the organization serves individuals, families, and children navigating psychological distress, trauma recovery, and specialized counseling needs. Because of the intimate nature of behavioral healthcare, Stronger Oregon routinely collects and maintains deeply sensitive personal and medical documentation. This includes comprehensive clinical intake files, psychological evaluations, psychotherapy notes, insurance billing particulars, and government-issued identification details necessary for verifying patient identity and processing therapeutic services.
In 2026, Roseburg Therapy dba Stronger Oregon formally reported a major cybersecurity incident to the Oregon Attorney General's office. While investigations into healthcare data breaches often reveal sophisticated external cyberattacks, unauthorized network infiltration, or vulnerabilities within third-party electronic health record vendors, the fundamental reality remains that sensitive digital infrastructure was compromised. Healthcare providers have increasingly become primary targets for malicious actors due to the immense black-market value of complete medical identity profiles and the operational disruption that unauthorized system access causes to clinical practices.
The exposure resulting from the Stronger Oregon incident implicates categories of data that carry severe, long-term risks for affected individuals. Unauthorized disclosure of Protected Health Information (PHI) and Personally Identifiable Information (PII)—such as full names, dates of birth, Social Security numbers, clinical diagnoses, treatment history, and health insurance details—creates immediate vulnerabilities. Unlike a compromised credit card, which can be readily cancelled and replaced, an individual's medical history and Social Security number cannot be altered. This exposes victims to sustained dangers including targeted medical identity fraud, where unauthorized parties obtain healthcare services under a victim's name, as well as complex financial scams, tax fraud, and severe psychological distress resulting from the exposure of deeply private mental health records.
As a provider handling sensitive medical records, Roseburg Therapy dba Stronger Oregon was bound by strict legal and regulatory mandates to safeguard patient information. Under the Health Insurance Portability and Accountability Act (HIPAA), as well as Oregon state privacy and data protection statutes, healthcare entities are legally obligated to implement comprehensive administrative, physical, and technical safeguards. These regulations require robust encryption standards, regular vulnerability assessments, multi-factor authentication, and stringent access controls. The occurrence of a data breach of this magnitude strongly indicates potential failures in adhering to these mandatory security standards, raising significant questions regarding whether reasonable care was exercised to protect patient files.
Receiving a data breach notification letter from Roseburg Therapy dba Stronger Oregon is a formal legal admission that your confidential records were compromised while under their care. Under modern consumer protection and privacy jurisprudence, the receipt of such a notification establishes the legal standing necessary to participate in a class action lawsuit, without requiring immediate proof of out-of-pocket financial loss. Our law firm is actively investigating potential class action claims on behalf of affected patients. We evaluate these cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket, and our firm only collects compensation if a successful recovery is achieved on your behalf.
Notification Delay: Approximately over 25 years elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Roseburg Therapy dba Stronger Oregon
You were a customer, patient, employee, or client of Roseburg Therapy dba Stronger Oregon
Your personal information was stored in Roseburg Therapy dba Stronger Oregon's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Do not discard the Roseburg Therapy dba Stronger Oregon letter. It documents your standing as an affected individual — the foundation of any claim you file.
Check your Roseburg Therapy dba Stronger Oregon letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Deadlines apply to breach claims. A free review of your Roseburg Therapy dba Stronger Oregon letter takes minutes, and we only get paid if you do.
Security Incident
2001-01-01
Someone gained unauthorized access to data held in Roseburg Therapy dba Stronger Oregon's systems.
Reported to Attorney General
October 19, 2026
The Oregon AG received Roseburg Therapy dba Stronger Oregon's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like Roseburg Therapy dba Stronger Oregon's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
States like Oregon may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Oregon's Consumer Identity Theft Protection Act requires businesses to implement reasonable safeguards. Oregon courts have recognized class action standing for data breach victims.
Other companies have notified the Oregon AG of breaches. Received one of these letters as well? You may have more than one claim.
Hood River Dental
Oregon · Oct 2026
PeaceHealth Sacred Heart Medical Center
Oregon · Oct 2026
AllCare Health, Inc.
Oregon · Oct 2026
iRhythm Technologies Inc.
Oregon · Oct 2026
Sheppard, Mullin, Richter & Hampton LLP
Oregon · Oct 2026
Poppins Payroll Company
Oregon · Sep 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris