Oregon
Cyber liability insurance in Oregon
Internet crime data, breach notification rules, and city guides for Oregon businesses. A quote is not a binder.
Oregon residents filed 9,011 internet crime complaints with the FBI in 2024 and reported $144,160,344 in losses. The state had 122,451 business establishments in 2023, 28% of them in health care, professional services, or finance, the sectors that hold the most sensitive data. Below are the state's numbers, its breach notification law, what moves a cyber quote, and guides for the largest cities.
Oregon cyber risk at a glance
| Measure | Oregon | Source |
|---|---|---|
| IC3 internet crime complaints (2024) | 9,011 | FBI IC3 |
| Reported internet crime losses (2024) | $144,160,344 | FBI IC3 |
| Complaints per 100,000 residents (2024) | 210.9 | FBI IC3 |
| Business establishments (2023) | 122,451 | Census CBP |
| Health care and social assistance establishments | 15,709 | Census CBP |
| Professional, scientific, and technical establishments | 13,318 | Census CBP |
| Finance and insurance establishments | 5,783 | Census CBP |
| Share of establishments in these three sectors | 28% | Census CBP |
| Establishments with fewer than 5 employees | 54% | Census CBP |
| Workers who work from home | 19% | Census ACS |
Sources: FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report; U.S. Census Bureau, County Business Patterns 2023: all industries, health care and social assistance (NAICS 62), professional, scientific, and technical services (NAICS 54), and finance and insurance (NAICS 52); U.S. Census Bureau, American Community Survey 5-year estimates, 2020–2024 (tables B08301, B25003, B25024, B25035), via Census Reporter.
Oregon data breach notification law
When personal information about Oregon residents is compromised, notice is governed by ORS 646A.600 to 646A.628 (Oregon Consumer Information Protection Act). The statute defines personal information, sets the timing and content of notices, and in some cases requires notice to the attorney general. Affected people in other states bring their own laws into play. Our breach notification guide compares the ten states we serve.
What moves a Oregon cyber quote
- Revenue and size of the business.
- Industry, especially health care, finance, and professional services.
- Records held: volume and type of personal, health, and payment data.
- Security controls: MFA, endpoint detection and response, backups, and patching.
- Limits, retention, and waiting period you choose.
- Coverage options such as social engineering and dependent business interruption.
- Prior incidents and claims.
See cost factors and security controls insurers look for.
City guides for Oregon
- Portland
- Salem
- Eugene
- Gresham
- Hillsboro
- Bend
- Beaverton
- Medford
- Corvallis
- Springfield
- Tigard
- Albany
- Lake Oswego
- Grants Pass
- Keizer
- Oregon City
- Redmond
- McMinnville
- Woodburn
- Happy Valley
Coverage and guides
- First-party cyber coverage
- Third-party cyber liability
- Ransomware and cyber extortion coverage
- Social engineering and funds transfer fraud
- Cyber business interruption
- Regulatory defense and PCI coverage
- Data breach notification laws by state
- Security controls cyber insurers look for
- Cyber insurance application checklist
- What affects cyber insurance cost
- Building a cyber incident response plan
More Oregon communities
We accept cyber insurance requests from businesses anywhere in Oregon. Other communities, grouped by county:
Marion County: Turner, Sublimity, Stayton, St. Paul, Silverton, Scotts Mills, Mount Angel, Jefferson, Idanha, Hubbard, Gervais, Gates, Donald, Detroit, Aurora, Aumsville
Douglas County: Yoncalla, Winston, Sutherlin, Roseburg, Riddle, Reedsport, Oakland, Myrtle Creek, Glendale, Elkton, Drain, Canyonville
Linn County: Waterloo, Tangent, Sweet Home, Sodaville, Scio, Millersburg, Mill City, Lyons, Lebanon, Harrisburg, Halsey, Brownsville
Umatilla County: Weston, Umatilla, Ukiah, Stanfield, Pilot Rock, Pendleton, Milton-Freewater, Hermiston, Helix, Echo, Athena, Adams
Clackamas County: Wilsonville, West Linn, Sandy, Rivergrove, Molalla, Milwaukie, Johnson City, Gladstone, Estacada, Canby, Barlow
Jackson County: Talent, Shady Cove, Rogue River, Phoenix, Jacksonville, Gold Hill, Eagle Point, Central Point, Butte Falls, Ashland
Lane County: Westfir, Veneta, Oakridge, Lowell, Junction City, Florence, Dunes City, Creswell, Cottage Grove, Coburg
Grant County: Seneca, Prairie City, Mount Vernon, Monument, Long Creek, John Day, Granite, Dayville, Canyon City
Washington County: Tualatin, Sherwood, North Plains, King City, Gaston, Forest Grove, Durham, Cornelius, Banks
Yamhill County: Yamhill, Willamina, Sheridan, Newberg, Lafayette, Dundee, Dayton, Carlton, Amity
Union County: Union, Summerville, North Powder, La Grande, Island City, Imbler, Elgin, Cove
Baker County: Unity, Sumpter, Richland, Huntington, Halfway, Haines, Baker City
Columbia County: Vernonia, St. Helens, Scappoose, Rainier, Prescott, Columbia City, Clatskanie
Coos County: Powers, North Bend, Myrtle Point, Lakeside, Coquille, Coos Bay, Bandon
Lincoln County: Yachats, Waldport, Toledo, Siletz, Newport, Lincoln City, Depoe Bay
Tillamook County: Wheeler, Tillamook, Rockaway Beach, Nehalem, Manzanita, Garibaldi, Bay City
Wasco County: The Dalles, Shaniko, Mosier, Maupin, Dufur, Antelope
Clatsop County: Warrenton, Seaside, Gearhart, Cannon Beach, Astoria
Klamath County: Merrill, Malin, Klamath Falls, Chiloquin, Bonanza
Malheur County: Vale, Ontario, Nyssa, Jordan Valley, Adrian
Morrow County: Lexington, Irrigon, Ione, Heppner, Boardman
Multnomah County: Wood Village, Troutdale, Maywood Park, Fairview
Polk County: Monmouth, Independence, Falls City, Dallas
Sherman County: Wasco, Rufus, Moro, Grass Valley
Wallowa County: Wallowa, Lostine, Joseph, Enterprise
Benton County: Philomath, Monroe, Adair Village
Curry County: Port Orford, Gold Beach, Brookings
Gilliam County: Lonerock, Condon, Arlington
Jefferson County: Metolius, Madras, Culver
Wheeler County: Spray, Mitchell, Fossil
Deschutes County: Sisters, La Pine
Harney County: Hines, Burns
Hood River County: Hood River, Cascade Locks
Lake County: Paisley, Lakeview
Crook County: Prineville
Josephine County: Cave Junction
Cyber insurance in Oregon: FAQ
What is Oregon's data breach notification law?
ORS 646A.600 to 646A.628 (Oregon Consumer Information Protection Act). Businesses must also consider the laws of other states where affected individuals live.
How much internet crime is reported in Oregon?
The FBI's IC3 received 9,011 complaints from Oregon in 2024, with $144,160,344 in reported losses.
Who regulates cyber insurers in Oregon?
Insurance companies are regulated by the Oregon Division of Financial Regulation.
How do I get cyber insurance in Oregon?
Gather your business details, data inventory, and security controls, then request quotes. Insurers price each business individually after underwriting.
Sources
- FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report
- U.S. Census Bureau, County Business Patterns 2023: all industries, health care and social assistance (NAICS 62), professional, scientific, and technical services (NAICS 54), and finance and insurance (NAICS 52)
- U.S. Census Bureau, American Community Survey 5-year estimates, 2020–2024 (tables B08301, B25003, B25024, B25035), via Census Reporter
- U.S. Census Bureau Vintage 2024 city population estimates
- Oregon Division of Financial Regulation
Last updated October 15, 2026 · How we research