Where does the Canby Clinic case file come from?

Every entry is taken from the breach report Canby Clinic lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Canby Clinic Data Breach

This file collects the dated facts on record for the Canby Clinic incident. The state report is dated May 17, 2025. The incident itself is dated April 22, 2025.

Timeline

25 days separate the incident date from the date it was reported.

April 22, 2025Incident dateWhen the filing says the breach took place.
May 17, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: May 17, 2025
Incident date: April 22, 2025
Receiving office: Oregon Attorney General

Case notes

Canby Clinic, an entity operating in Oregon, has formally reported a data security incident to state regulators. This public disclosure, submitted on May 17, 2025, details an event where the confidentiality of personal information may have been compromised.

The official filing does not specify the exact categories of information involved in this breach. Therefore, affected individuals should consider that various forms of their personal data may have been exposed during this incident.

The breach itself is noted to have occurred on April 22, 2025. Canby Clinic has confirmed that an investigation into the nature and extent of this security event is currently in progress.

Given the potential exposure of personal information, it is prudent for anyone who may be affected to take proactive steps to safeguard their data. This includes carefully reviewing all account statements for any unusual or unauthorized transactions.

Additionally, individuals should consider placing a fraud alert on their credit reports with the three major credit bureaus. This measure can help prevent new accounts from being opened in their name. Regularly checking your credit report for inaccuracies or suspicious activity through services like annualcreditreport.com is also a recommended practice.

Questions about this case file

Where does the Canby Clinic case file come from?: Every entry is taken from the breach report Canby Clinic lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the Canby Clinic breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files