In late October, we identified a bad actor used deceptive social engineering tactics that resulted in unauthorized access. The incident is limited to data controlled by Santiam Hospital and Clinics. This incident did not involve any data from Salem Hospital, West Valley Hospital or Salem Health Clinics.

We are working to quickly identify and then notify impacted individuals. We understand how concerning this is to our community.

We took immediate steps to secure the system, and we are working with cybersecurity experts to investigate. All known risks have been contained.

We understand posts are circulating on social media and elsewhere online. We urge patients and community members not to click on links that reference this matter. These may be scams. Official communication will come from Salem Health. 

We take the privacy of our patients seriously. Today Santiam Hospital and Clinics operate on a different system, and no data is comingled with Salem Health. Since Santiam’s affiliation with Salem Health Hospitals and Clinics, Salem Health has invested in strengthening Santiam’s cybersecurity, and that work continues.