Lifeways Data Breach: Social Security Numbers Exposed

Lifeways Inc., a nonprofit behavioral health organization serving communities in Eastern Oregon and parts of Idaho, disclosed a data security incident that may have exposed sensitive personal and medical information.

On Jan. 21, 2026, Lifeways discovered suspicious activity potentially related to an employee email account. Upon discovery, the company took steps to secure its email system and network.

Lifeways then engaged third-party computer specialists to investigate the full nature and scope of the incident.

The investigation determined that emails within certain employee email accounts had been subject to unauthorized access. This means an unauthorized party may have been able to view the contents of those email messages, which could have contained personal and medical information about certain individuals served by the organization.

A review of the impacted files was completed on May 8, 2026, ultimately determining that the affected emails may have contained protected health information.

The types of personally identifiable information (PII) potentially exposed included names, dates of birth, Social Security numbers, driver's license or state identification numbers, financial account numbers and patient account numbers.

The types of protected health information (PHI) potentially exposed included medical record numbers, medical diagnosis information, clinical information, treatment locations, medical treatment and procedure information, prescription information, provider names, Medicare numbers, Medicaid numbers, health insurance group numbers and health insurance account numbers.

Lifeways posted a notice about the incident on its website on June 11, 2026. The total number of individuals affected was not publicly disclosed.

Lifeways' response to the breach

Lifeways recommended that individuals review their account statements and Explanation of Benefits forms for signs of unauthorized activity.

To assist affected individuals, Lifeways established a toll-free call center. The call center can be reached at 1-800-405-6108 from 8 a.m. to 8 p.m. ET, Monday through Friday, excluding holidays. Individuals with questions or concerns about the incident can call to speak with a representative.