Oregon DHS discloses breach potentially affecting 350,000 after successful phisher gained access to employees’ email accounts

KDRV reports:

Oregon’s Department of Human Services (DHS) revealed on Thursday that the private data of more than 350,000 clients may have been accessed in a massive data breach that began earlier this year.

The agency said that the breach stemmed from a phishing scam that infected the emails of nine separate employees after they clicked a suspicious link. The link “compromised their email mailboxes,” and allowed the scammers to access the employees’ emails.

Read more on KDRV.

The following is the state’s notice, posted on their web site today:

Note that they have not yet finished determining who needs to be notifed, so if you haven’t heard anything yet, it doesn’t mean that you won’t.

Update: The state has 1.6 million clients. It’s still unclear how many of them may have been impacted.