TEAM Software Data Breach Notice (Oregon Attorney General)

The notice you received from TEAM Software means that personal information belonging to you was included in an incident that occurred on July 25, 2024. The company filed its formal notification with the Oregon Department of Justice on November 12, 2024 — 110 days later. That gap is the single most striking fact in the record.

Three and a Half Months Passed Before Oregon Residents Were Told

Incidents are dated from the day they are considered to have happened. Here the filing states the incident occurred on July 25 and the notification reached the state attorney general on November 12. The 110-day interval sits between those two fixed dates. Notification timelines vary by state law and by when an investigation concludes, so the record does not label the delay as excessive or insufficient. It simply records both dates and the resulting span. For nearly 100,000 people whose information was involved, that span is now a permanent part of the public timeline.

What the Filing Actually Lists as Exposed

The record names only one broad category: personal information. It does not list Social Security numbers, driver’s license numbers, financial account details, medical information, or any other specific data type. Because the filing stays at this high level, you cannot assume every common identifier was taken. What matters is that whatever personal information the company held about you reached the incident. No passwords or credentials of any kind appear in the exposed categories.

This absence of credential exposure is genuine good news. There is no evidence that any TEAM Software account password was compromised, so there is no reason to reset your password for this service on the basis of this incident.

What Personal Information Exposure Actually Enables

Names, addresses, dates of birth, and government identifiers — when any of them are confirmed in a breach — do not expire. Unlike a credit card number that can be replaced, these details remain useful to identity thieves for years. They can be combined with information from other breaches to build convincing synthetic identities or to answer knowledge-based security questions at banks, tax agencies, and government portals.

The 99,525 people named in this filing now carry an elevated but not unique risk. The exposure itself cannot be undone. What you still control is how aggressively you monitor for misuse and how quickly you can respond if new accounts or tax filings appear in your name.

How to Determine Whether You Were Personally Affected

TEAM Software is required to notify affected Oregon residents directly, almost always by mail to the last known address. If you have not received a letter, it is likely your records were not part of the 99,525 included in the filing. However, if you have moved at any time since July 25, 2024, the letter may have gone to an old address. In that case, contact TEAM Software directly to confirm whether your information was involved. The filing does not provide any other public method to check your status.

The Limits of What This Record Can Tell You

The notification contains no description of how the incident occurred, whether data was copied or simply viewed, or how long any unauthorized access lasted. It also does not state when TEAM Software first learned of the problem. These details are simply absent. The only facts established are the incident date, the filing date, the number of Oregon residents involved, and the general category of personal information.

Because the record is narrow, speculation about root causes or security posture is unsupported. The filing tells you what left the company’s control and how many people in Oregon were named. Nothing more.

Practical Steps That Address This Specific Exposure

• Place a fraud alert or credit freeze with the three major credit bureaus immediately. This is the single most effective step after personal information exposure. It forces lenders to verify your identity before new accounts can open.
• Monitor your credit reports weekly for the next year. Free weekly reports are available from AnnualCreditReport.com. Look for accounts or inquiries you do not recognize.
• File your taxes early and watch for IRS rejection notices. Identity thieves sometimes file fraudulent returns using stolen personal information. Early filing reduces the window they have to act.
• Review every Explanation of Benefits and insurance statement for unfamiliar claims. Even though medical data is not explicitly listed, personal information can still enable fraudulent billing attempts.
• Keep records of this incident. Save the letter and a copy of this filing. If identity theft appears later, these documents help prove when the breach occurred and that you acted reasonably.

The exposure cannot be reversed, but its practical impact remains manageable for most people who respond early. The 110-day notification window is now public record. Use the time you have now to lock down the accounts and alerts that still sit under your control.