Data Breach at Snake River Correctional Institution Exposes Thousands of Records The Oregon Department of Corrections (ODOC) disclosed a significant data breach at Snake River Correctional Institution (SRCI), located outside Ontario, Oregon. The incident, discovered on January 5, involved a former employee who improperly accessed and extracted 33,000 files containing over 7.5 GB of sensitive data between July 7, 2025, and January 2026. The compromised records include personal information belonging to employees, vendors, visitors, and inmates associated with the facility. ODOC is collaborating with forensic investigators to determine the full scope of affected individuals. The former employee responsible for the breach has since been terminated. SRCI, which relies on Ontario’s water supply despite its location outside city limits, has not disclosed specific details about the types of data exposed. The breach underscores ongoing risks to sensitive institutional data in correctional facilities. No further updates on remediation efforts or potential legal consequences have been released.