Were you recently affected by a data breach?

Stronger Oregon Data Breach

Roseburg Therapy, doing business as Stronger Oregon, an Oregon mental health provider, filed a data breach notice with the Oregon Department of Justice, reported on October 19, 2026. The public entry does not say what happened or what information was involved.

Stronger Oregon
Date of Breach: Not disclosed in the Oregon DOJ filing
CAU logo

Who was affected:

Clients of Stronger Oregon

Impacted Data:

Not disclosed. The Oregon Department of Justice entry does not list the types of information involved, and no notice letter was available.

Roseburg Therapy, which does business as Stronger Oregon, an Oregon outpatient mental health provider, appears on the Oregon Department of Justice’s public list of data breach notices filed with the state. The entry was reported on October 19, 2026, and the entry gives few details about what happened.

Roseburg Therapy dba Stronger Oregon’s Data Breach Investigation

Roseburg Therapy LLC does business as Stronger Oregon, a mental health agency based in Roseburg, Oregon. According to the company’s own website, it provides outpatient mental health treatment and school mental health services across the state, with offices in a number of Oregon cities and telehealth available for people who cannot visit in person. Its programs include outpatient therapy, services delivered inside schools, in-home care for older adults, and outreach and case management.

The Oregon Department of Justice keeps a searchable public database of organizations that have sent a data breach notice to the Attorney General. Under Oregon law, a business that notifies more than 250 Oregon consumers of a breach of security must also give the Attorney General a sample copy of that notice. Roseburg Therapy dba Stronger Oregon appears in that database with a reported date of October 19, 2026. That is the date the filing was reported to the state, and it is the only dated fact the entry provides.

The entry leaves most of the details blank. The fields for the dates of the breach, the dates of discovery and the date the notice was sent hold a placeholder value that does not correspond to a real date, so no timeline can be drawn from it. The database also does not describe how the incident happened, which systems were involved, whether an outside party was responsible, or what kinds of personal information were exposed.

The affected-person figure in the entry is very low. The Oregon Department of Justice explains that its public database reflects the information an organization gave in its initial report, and that later supplemental notices are processed internally without updating the public numbers. For that reason, the figure should not be read as the full scope of the incident, and this page does not state a total number of people affected. The company has not published a count, and none was found in the sources reviewed.

No separate notice letter, press statement or news report about an incident at Stronger Oregon was found in the sources reviewed, and the Oregon listing has no linked document. That means the cause, the length of any exposure and the steps the company has taken in response are all unknown at this time. This page will be reviewed if the company or a regulator publishes more detail.

Because the filing exists, it is reasonable to expect that some Oregon residents received, or will receive, a notice by mail. A person who is a current or former client of the practice, or a family member whose information may have been handled by it, may want to watch for that letter. If a notice arrives, its own description of what happened and what information was involved will be the most reliable record for your situation.

Providers of mental health services keep some of the most sensitive records of any sector. Intake paperwork, insurance details, session scheduling, billing records and clinical notes can all sit in the same systems. That is general context about the industry and not a statement about what was held or exposed here. When records of this kind are exposed, the harm can reach beyond financial fraud, because the existence of treatment itself is private information that many people choose to keep close.

Agencies that serve children through school programs add another layer of concern, because the files can include information about minors and their parents or guardians. Again, this is general context only, and the sources reviewed do not say whether any student or school record was involved in the notice that was filed with Oregon.

People who are contacted about this incident should treat any unexpected message that mentions it with caution. Scammers sometimes copy the language of a real notice to trick recipients into sharing more information. Confirm any request for personal details or payment by calling the company at a phone number you already trust, and avoid following links in unexpected texts or emails.

When Did This Breach Occur?

Oregon’s public entry lists the report date as October 19, 2026. The entry does not give a usable date for when the incident happened, when the company found it, or when notices were mailed, because those fields contain a placeholder rather than a real date.

If you receive a notice, the dates it states will be the most reliable record of the timeline for your information.

What Information Was Breached?

The Oregon entry does not say what types of information were involved, and no notice letter was available in the sources reviewed. No specific data types have been confirmed.

Because a mental health provider may hold identity, insurance and health-related details, it is prudent to read any notice you receive closely to see which of your details, if any, were included.

What You Can Do

If you received a notice related to Roseburg Therapy dba Stronger Oregon or believe you may be affected, consider these steps:

  • Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
  • Be cautious with emails, texts or calls that mention the incident, and verify any request for information by phone using a number you already trust.
  • Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
  • Review bank, card and insurance statements for anything you do not recognize.
  • Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.

File a Data Breach Lawsuit Against Roseburg Therapy dba Stronger Oregon

If you are notified that your personal information was exposed in an incident involving Roseburg Therapy dba Stronger Oregon, you may have legal options. Companies are expected to safeguard the sensitive information entrusted to them, and a class action can help hold them accountable when they fail to do so.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?
Other Data Breaches
Date of Breach: Not disclosed in the Oregon DOJ filing
Date of Breach: August 4, 2026 (discovered)
Date of Breach: August 5, 2025 (on or around); identified September 12, 2025
Related News

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.