Oregon DOJ reviews McMinnville breach notification timeline

The Oregon Department of Justice is reviewing McMinnville's data breach and notification timeline, KPTV reported. The city sent formal notices on September 29 after detecting unusual network activity on or about July 15. Its investigation found that files containing names, Social Security numbers and driver's license numbers may have been accessed and copied between June 1 and July 18. Oregon law requires notification without unreasonable delay and no later than 45 days after discovery. Whether July's unusual activity or later confirmation of affected personal information started that clock remains unresolved. The city declined to explain its interpretation, and the DOJ has not said whether its review will lead to formal action.