Cybersecurity incident — 2019-03-21 00:00:00
Affected organization: Oregon Department of Human Services
Affected country: United States of America
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Undetermined
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

The Oregon Department of Human Services (DHS) announces that roughly 2 million emails with Protected Health Information from more than 350,000 customers have been potentially exposed after 9 employee mailboxes were compromised in a spear phishing attack.