← Back to blog

Oregon DMV Data Breach – What You Need to Know

in Security
Hands typing on keyboard

Please contact the DMV if you have questions about the data breach that are not answered below:  503.945.5000.

 

What We Know

On June 1, 2023, the Oregon Department of Transportation learned they were part of a global hack of the file transfer tool called MOVEit, which they use to send and receive data. They immediately secured their system. However, they later learned that data records for Oregon driver’s licenses, permits, and ID cards were accessed.

If you have an active Oregon driver’s license, permit, or ID card, you should assume your personal information was exposed.  They recommend you take steps now to secure your information.

The DMV doesn’t know exactly what data was accessed by the breach, or which individuals were affected, but you should be aware that the personal information that is typically associated with a DMV driver’s license, permit or ID card record—and thus, may have been exposed—would include:

  • Name
  • Home and mailing address
  • License or ID number
  • Last four digits of Social Security number

Your accounts at Embold Credit Union were not compromised or exposed. This information did not include banking, credit card, or any other financial information. Your full Social Security number was not part of the data. As a reminder, Embold will never solicit your personal or account information through an email, text message, or phone call.

They understand that the data breach may cause their customers worry and concern, and it may require you to take some extra steps to achieve peace of mind. They’re working to provide you all the information you need to protect yourself.

ODOT’s official notification letter about the breach

What You Can Do

There are immediate steps you can take to protect your information from identity theft:

Enable Two-Factor Authentication: Setting up two-factor authentication (2FA) inside Embold Digital Banking will greatly reduce the odds of a fraudster getting into your accounts online
Set up text alerts: Text alerts via Embold Digital Banking can provide peace of mind by notifying you whenever there’s deposit or withdrawal activity on your accounts
Monitor your credit report: You can request a free copy of your credit report at www.annualcreditreport.com, or call toll free 1.877.322.8228
Freeze your credit files: Request a temporary or semi-permanent freeze on your credit file with the three credit monitoring agencies for greater security

They recommend you actively monitor your account statements and credit reports. You are entitled to a free copy of your credit report once every 12 months from each of the three major credit reporting agencies, Experian, Equifax, and TransUnion.

You can also place fraud alerts with the three credit bureaus. Placing a fraud alert at one of the three major credit bureaus notifies the other two to place the same alert on their files for you. A fraud alert tells creditors to take certain steps, including contacting you, before they open any new accounts in your name or change your existing accounts. Placing a fraud alert can protect you, but means it will probably take more time for you to open new credit accounts. There is no charge for this protective measure. An initial fraud alert will last for one year.

If you ever believe you are the victim of identity theft, you should immediately file a police report with your local police department. A police report is often required to dispute fraudulent charges. You can also report suspected incidents of identity theft to local law enforcement, the Oregon Attorney General, and the Federal Trade Commission (FTC).

Disclosures

Source: https://www.oregon.gov/odot/dmv/pages/data_breach.aspx