Oregon Food Bank (United States) notified the Oregon Department of Justice and the Vermont Attorney General of a data breach on 20 April 2026. It told the states about 1,254 Oregon residents; the total can be higher. Exposed: Financial account and card details and Credit or Debit Account Info. The breach began on 24 October 2025, 178 days before it was reported.
Status
Confirmed breach
People affected
1,254 Oregon residents (one state’s count; the total can be higher)
Reported
20 April 2026
Across the state notices
at least 1,265 people (Oregon and Vermont: each state counts only its own residents)
Breach began
24 October 2025
Time to tell
178 days (the median in California’s notices over the last year: 154 days)
Look for Oregon Food Bank’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
Expect scams that use your details: calls, texts or emails pretending to be Oregon Food Bank, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked