Oregon Anesthesiology Group

Oregon Anesthesiology Group, also known as OAG, delivers anesthesiology services to patients undergoing surgical and procedural interventions. The organization provides anesthesia administration, continuous monitoring of vital signs, and postoperative pain management. Its clients include hospitals, ambulatory surgery centers, and other clinical facilities primarily located in the state of Oregon. The focus of its practice is limited to the perioperative period, aiming to ensure patient safety and comfort during operations.

According to the breach notification issued after the July 2021 incident, OAG serves approximately 750,000 patients. The same notice states that the organization employs about 522 individuals. This patient volume demonstrates a large patient base within Oregon's healthcare sector. OAG’s specialization in anesthesiology distinguishes it from providers that offer a wider array of medical specialties.

On July 11, 2021, the HelloKitty ransomware group launched an attack that compromised OAG’s information technology systems. The intrusion resulted in unauthorized access and the exfiltration of sensitive data. Patient information taken included medical records, insurance details, and treatment codes. Employee data exposed comprised Social Security numbers and W-2 forms. Forensic investigators determined that stolen credentials enabled the attackers to reach encrypted systems. In response, OAG undertook a complete rebuild of its IT infrastructure and relied on off-site backups during recovery. The organization subsequently strengthened its defenses by implementing multifactor authentication across additional systems and by replacing outdated firewall hardware. Affected individuals were offered identity protection services to mitigate potential harm from the disclosed information.

Oregon Anesthesiology Group’s headquarters is located in the United States, as indicated in the available sources. No public information describes its ownership structure, parent company, or any subsidiary relationships. Consequently, details about corporate governance or affiliations remain unspecified in the material provided.