A state employee sued the Department of Administrative Services after it inadvertently released the vaccination status of more than 40,000 state employees.
The data breach occurred in May, according to a report in The Oregonian/OregonLive. The health system discovered it in June and only commented publicly on Monday.