# Santiam Hospital & Clinics Data Breach Investigation Canonical overview: https://hallattorneys.com/investigations/santiam-hospital Published: October 28, 2026 Last reviewed: October 28, 2026 Stayton, Oregon · Unverified Anubis Claim Hall Attorneys is investigating reports of a possible cybersecurity incident involving Santiam Hospital & Clinics in Stayton, Oregon. Public ransomware tracking names the hospital and clinic network as an alleged target of Anubis. The claim remains unverified; a listing does not establish that a breach occurred or that patient or employee information was stolen. Were you a patient or employee of Santiam Hospital & Clinics? If you received a security notice or have information suggesting your records may be involved, contact Hall Attorneys to request a case review. Start with a brief description of your concern. ## What has been reported? RansomLook, a public ransomware-tracking service, lists Santiam Hospital & Clinics under Anubis with the description “A major medical data breach.” That wording is the alleged attacker’s claim, not an independently established finding. The tracker displays a listing date of October 29, 2026. That is the tracker’s listing date, not a confirmed date of unauthorized access or data theft. A Dark Web Intelligence post reviewed for this investigation also reports the listing. According to that post, no data volume, file list, or verified samples had been published at the time of its report. Those details describe the report at publication, not the results of a forensic investigation. Hall Attorneys has not independently verified the breach claim. The sources reviewed for this page do not include a hospital-issued confirmation of an incident. The affected systems, access dates, types of records, and number of people potentially affected remain unknown. A listing alone does not establish that ransomware was deployed, that a ransom was paid, or that patient care was disrupted. Sources: RansomLook: Anubis listings (unverified claims): https://www.ransomlook.io/group/anubis ## What information are we investigating? Santiam’s official website describes a community hospital and clinic network in Stayton, Oregon, serving the Santiam Canyon and surrounding communities. Its patient-information pages provide a patient privacy notice. Those materials explain the organization and its privacy practices; they do not confirm this reported incident. We are investigating whether an unauthorized party accessed or disclosed patient names and contact details, medical or treatment records, insurance and billing information, identity documents, or employee records. These are categories under investigation, not confirmed categories of exposed information. We are examining what supports the reported claim, the safeguards applied to sensitive records, whether any required notices or assistance were provided, and whether people experienced related losses, response costs, or other consequences. Individual exposure and legal responsibility have not been determined. Sources: Santiam Hospital & Clinics: Official website: https://santiamhospital.org/ Santiam Hospital & Clinics: Patient policies and privacy notice: https://santiamhospital.org/patients-visitors-info-2/policies-patient-rights-responsibilities/ ## Who should contact Hall Attorneys? We would like to hear from current or former patients, patient representatives, employees, and others with information suggesting their records may be involved, particularly those who: - Received a security notice or other incident-related communication identifying Santiam Hospital & Clinics. - Encountered suspicious calls, messages, bills, or insurance activity using accurate, nonpublic details about their care, account, or employment. - Have records of suspected unauthorized disclosure, financial losses, expenses, or time spent responding to a potentially related concern. You do not need a breach notice or known financial loss to request a review. Receiving care or working at Santiam does not establish that your information was exposed, and suspicious activity alone does not establish a connection to this claim. An initial inquiry does not identify you publicly as a client or plaintiff. If you are contacting us for a child or another patient, describe your relationship without sending the patient’s medical history. ## What should you preserve? Keep security notices, envelopes, emails, account alerts, and subsequent updates. Preserve suspicious messages, billing or insurance correspondence, and records of relevant expenses, losses, reports, and time spent responding. Keep sensitive records in your possession until we discuss what is needed. Do not send medical records, diagnoses, test results, insurance identifiers, Social Security numbers, passwords, or complete financial-account details in an initial email or website submission. Do not search for, download, or share allegedly stolen patient records. A description of the information you already have is sufficient to begin a review. ## Contact us without sharing your medical history Provide your name, state of residence, a safe way to reach you, your relationship to Santiam Hospital & Clinics, and whether you received a security notice. Briefly describe your concern and when it arose. Let us know whether it is safe to leave a voicemail. Describe sensitive documents before sending them. If additional records are needed, we will discuss an appropriate way to provide them. Contact your healthcare provider directly for questions about treatment, appointments, or access to medical records. Email: nhall@hallattorneys.com Phone: 713-428-8967 Request a Case Review: https://hallattorneys.com/connect Attorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Santiam Hospital & Clinics. This page describes an investigation into an unverified claim, not a filed lawsuit by Hall Attorneys concerning this incident. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.