Oregon Health Authority

Oregon Health Authority (OHA) is the state agency responsible for protecting and improving the health of all Oregon residents. It administers the Oregon Health Plan, the state’s Medicaid program, providing health coverage to low‑income individuals, families, seniors, and people with disabilities. The agency oversees a broad range of public health functions, including immunization outreach, infectious disease surveillance, chronic disease prevention, maternal and child health programs, and environmental health protections. OHA also licenses and regulates hospitals, nursing homes, ambulatory surgical centers, and behavioral health providers to ensure compliance with safety and quality standards. In addition, it collects, analyzes, and disseminates health data to support policy development, evaluate program outcomes, and respond to emerging health threats. The agency coordinates with local public health authorities, tribal health programs, and community organizations to deliver services across the state’s diverse geographic and cultural landscapes.

Headquartered in the United States, OHA operates as a state government agency. Its role as both a major public payer through the Oregon Health Plan and a regulator of health care facilities gives it a distinctive influence over the financing and delivery of health services in Oregon. In May 2019, the agency experienced a spear‑phishing attack that resulted in unauthorized access to an employee’s email account containing protected health information of patients at a state psychiatric hospital. The organization halted the breach promptly and initiated notifications to state authorities and the public within days, despite uncertainty about specific data exposure or misuse. While no evidence indicated information was copied or misused, all potentially affected patients received preliminary alerts, with plans for individualized notifications pending a comprehensive review of the impacted email contents. This episode illustrated OHA’s commitment to transparency during an ongoing forensic assessment. Together, these responsibilities position OHA as a central entity shaping Oregon’s public health landscape and health care system.