PeaceHealth Sacred Heart Medical Center Files Oregon Breach

PeaceHealth Sacred Heart Medical Center officially reported a data breach to Oregon authorities on October 7, 2026, related to an incident that occurred earlier in the year. This notice serves to inform individuals about the public filing, acknowledging that specific details regarding the breach type and affected data remain unspecified in the official records. Those potentially impacted should review any direct notifications they receive.

State: Oregon
Breach date: March 20, 2026
Reported: October 7, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Provider and Treatment Dates

PeaceHealth Sacred Heart Medical Center, based in Oregon, submitted an official data breach notification on October 7, 2026. This filing acknowledges a security incident that potentially compromised personal information belonging to individuals connected with the medical center.

The reported breach itself took place on March 20, 2026. The nature of the breach, including how the incident occurred, is not specified in the public record. Similarly, the exact categories of personal information involved are also not detailed within the available regulatory filings.

Since the specific types of data exposed in this incident are not publicly available, it is important for individuals to maintain general vigilance regarding their personal information. This includes being aware of any unusual activity across their online accounts or financial statements.

Recommended protective steps include monitoring credit reports and financial statements for any unauthorized transactions or suspicious account openings. Additionally, be cautious of unexpected emails, text messages, or phone calls that request personal details, as these could be phishing attempts designed to exploit security incidents.

It is crucial for affected individuals to rely on official communications from PeaceHealth Sacred Heart Medical Center for specific guidance. Information contained in regulatory filings provides a public record of the incident, but direct notification from the organization will offer the most relevant advice.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Oregon Attorney General filing

Related data breach cases

Browse all Oregon data breaches View the full case directory