Dragons EyeRansomware tracker

US state report · OR

Ransomware claims in Oregon

Claims that ransomware groups posted against organizations we could place in Oregon, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
23
So far in October 2026
2Month in progress, not in the trend
Address on own website
20Confirmed location
State named in claim
3Inferred location
Latest claim
Oct 10, 2026

Claims per month in Oregon

Located Oregon claims in the last 12 complete months (UTC).

  1. October 2025: 4
  2. November 2025: 2
  3. December 2025: 2
  4. January 2026: 3
  5. February 2026: 2
  6. March 2026: 1
  7. April 2026: 0
  8. May 2026: 1
  9. June 2026: 6
  10. July 2026: 2
  11. August 2026: 0
  12. September 2026: 0

Top sectors

  1. Healthcare services4
  2. Manufacturing3
  3. Healthcare2
  4. Agriculture and agribusiness1
  5. Apparel1
  6. Architecture1
  7. Construction1
  8. Energy & Utilities1

Top cities

Only addresses confirmed on organizations' own websites.

  1. Portland4
  2. Hood River3
  3. Salem3
  4. Eugene2
  5. Beaverton1
  6. Cornelius1
  7. Grants Pass1
  8. McMinnville1

Latest claims in Oregon

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Oregon, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 10, 2026Gress Clark Young & SchoepperrhysidaLegalBeaverton, OR Own website2+ sources
Oct 2, 2026States IndustriesStormManufacturingEugene, OR Own website2+ sources
Jul 23, 2026BEHCAkillsec3HealthcarePortland, OR Own websiteSingle source
Jul 5, 2026SBI SoftwaregenesisFintechPortland, OR Own website2+ sources
Jun 30, 2026www.maytrucking.comembargoRoad transportSalem, OR Own website2+ sources
Jun 15, 2026hoodriversheriff.comsafepayLocal administrationsHood River, OR Own website2+ sources
Jun 9, 2026Auburn Electrical Construction CompanyembargoHospitality and TourismSalem, OR Own websiteSingle source
Jun 9, 2026Auburn Electrical Construction CompanyembargoEnergy & UtilitiesSalem, OR Own website2+ sources
Jun 5, 2026Oaks ParkakiraEntertainment industryPortland, OR Own website2+ sources
Jun 4, 2026Corley MFGplayManufacturingCornelius, OR Own website2+ sources
May 25, 2026Alten Sakai & Company LLPqilinTechnologyBeaverton, OR Own websiteSingle source
Mar 11, 2026Robinson NurseryakiraAgriculture and agribusinessMcMinnville, OR Own website2+ sources
Feb 21, 2026Bluefish Dental & OrthodonticsqilinHealthcare servicesOR Own website2+ sources
Feb 11, 2026Hood River DentalbravoxHealthcare servicesHood River, OR Own website2+ sources
Jan 22, 2026Nike, Inc.worldleaksRetail & E-CommerceOR Named in claim2+ sources
Jan 13, 2026Bulk Handling Systems CompaniesakiraManufacturingEugene, OR Own website2+ sources
Jan 2, 2026McKenzie SewOnqilinApparelEugene, OR Own websiteSingle source
Dec 16, 2025hoodriverdentist.comsafepayHealthcare servicesHood River, OR Own websiteSingle source
Dec 1, 2025Soderstrom Architects, LTDransomhouseArchitecturePortland, OR Own websiteSingle source
Nov 28, 2025Lone Rock TimberakiraManufacturingOR Own websiteSingle source
Nov 7, 2025Clackamas Community CollegemedusaSchoolsOR Own websiteSingle source
Oct 21, 2025River City EyegenesisHealthcare servicesOR Own websiteSingle source
Oct 21, 2025marquscompanies.comlynxHealthcareOR Named in claimSingle source
Oct 6, 2025Rogue Valley DoorsinobiConstructionGrants Pass, OR Own websiteSingle source
Oct 1, 2025icc-nw.netINC RansomTechnologiesOR Named in claimSingle source

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.