We are tracking 50+ companies that sent data breach notification letters to Oregon residents and reported to the Oregon Attorney General. If you received a notice, you may qualify for compensation — at no cost to you.
Oregon Consumer Identity Theft Protection Act (ORS § 646A.600 et seq.)
Oregon requires notification within 45 days and has one of the broadest definitions of personal information in the country — including usernames and passwords, email addresses with security questions and answers, and unique biometric data. Oregon courts have been active in recognizing class action standing for breach victims.
Oregon's broad definition of personal information means a breach of your login credentials or security questions triggers full legal protections — not just financial data. Oregon courts actively support class action lawsuits.
Received a data breach notification letter from a company in Oregon? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →