Oregon Department of Environmental Quality data breach

What we know

The Oregon Department of Environmental Quality (DEQ) is a state government regulatory agency responsible for protecting the quality of Oregon's environment. As a public entity, the agency collects and stores sensitive personal information related to employees, contractors, permit applicants, and individuals involved in regulatory compliance or environmental enforcement actions. In 2025, the agency officially reported a data security incident to the Oregon Attorney General, confirming that unauthorized access to its systems may have compromised personal records. If you received a data breach notification letter from the Oregon DEQ, it indicates that your personal information was likely contained within the affected files. This notice serves to inform you of the incident and provides guidance on the steps you should take to protect yourself from potential identity theft or fraud.

See every breach reported in Oregon or read what to do after a ransomware attack.