Data breach

AllCare Health

Oregon, United States1 source

NotifiedAllCare Health notified the US Department of Health and Human Services of a data breach on 8 Oct 2026. The register lists the breach type as unauthorised access or disclosure.

Open the live map Am I affected?

Oregon. State only.

Sector: Healthcare
Confirmed: 782 people
First reported: 8 Oct 2026
Latest source: 8 Oct 2026

What is known

Confirmed

782 people

As stated in the notice.

Claimed

No claimed figure

Data involved

Data types not stated

Cause

Unauthorised access or disclosure (as listed)

Disclosed: 8 Oct 2026
First seen by Black Shard: 9 Nov 2026

Filings

US Department of Health and Human Services8 Oct 2026Breach notice, 782 people affected

Sources

HHS Office for Civil RightsPrimary source8 Oct 2026HHS Office for Civil Rights breach report for AllCare Health, Inc.

Status timeline

8 Oct 2026
HHS Office for Civil Rights, primary source
8 Oct 2026
Status: notified

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 90%

The place 40%

1 independent source. State only.

Not known yet

Attack dateData involvedWho did it

Update log

9 Nov 2026First seen.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.