Latest / Oregon / May 2020

Gustafson & Company LLC

Gustafson & Company LLC notified Oregon DOJ on May 21, 2020 of a data breach affecting 2,207 individuals, which occurred between Jan 22, 2020 and Jan 28, 2020.

Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Gustafson & Company LLC
Source
Oregon DOJ · source record
Date reported
May 21, 2020
Date(s) of breach
1/22/2020 - 1/28/2020
Residents affected
2,207 (individuals)
Data exposed
Not stated in the source listing
Notice letter
Not available
Days to notice
114 days from the end of the breach window (Jan 28, 2020, no discovery date in the letter) to the Oregon record (May 21, 2020). Statute: 45 days from discovery or notification of the breach (ORS 646A.604).
First seen by BreachTally
2026-11-04 16:43 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:43 UTC on Nov 4, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.