Update on Secretary of State online systems
Last week we detected and stopped an intrusion into the agency’s website. As a precaution, we have temporarily taken down our online systems. To keep you informed, we are publishing answers to the most frequently asked questions. First, you’ll find answers to how to work around the outage. Second, you’ll find information about the incident itself.
About Secretary of State Services
When will ORESTAR, CBR, Business Search and other applications be back up?
As quickly as possible. Secretary of State staff is working long hours to bring these services back online. Our primary focus is to make sure this intrusion can’t be repeated.
Is my username and password information safe?
As a security measure, we have deleted all password information for our online services. That means you will be required to create a new password the next time you use one of our applications, such as ORESTAR or Central Business Registry (CBR).
If you use the same password for other personal accounts, we recommend that you change the password for them as well.
How will I know when ORESTAR is back online?
We will email all ORESTAR subscribers when it is back online with updated information on filing. You can also sign up to be notified: http://sos.oregon.gov/elections/Pages/default.aspx
I need to file a business form, pay a fee, get a certified copy…
Since Feb. 2, our business customers have been able to request lookups by phone or email, and submit filing and registration forms by fax, mail or in-person. Our customer support staff is here to help by phone at 503-986-2200, or contact us by email: corporation.division@state.or.us
How can I look up a business name or registration?
Please submit your request by email (corporation.division@state.or.us) or phone us at 503-986-2200 and we will provide the information.
How can I register or renew my business?
Forms are available (http://sos.oregon.gov/business/Pages/business-registration-forms.aspx) on our website to mail or fax. Please phone us at 503-986-2200 or contact us by email (corporation.division@state.or.us) if you need an annual report form for business renewal.
How can I renew a notary commission?
The notary application is available on our website (http://sos.oregon.gov/business/Pages/notary-public-forms.aspx) to mail or fax.
How can I look up a UCC record?
Please submit your request by email (corporation.division@state.or.us) or phone us at 503-986-2200 and we will provide the information.
How can I get a copy of a business or UCC filing?
Please submit your request by email (corporation.division@state.or.us) or phone us at 503-986-2200 and we will provide the information.
About the Incident:
What data did they get?
The investigation indicates that we caught the intrusion early. In addition, Oregon Secretary of State doesn’t store full credit card information.
How did this happen?
Websites are under attack all of the time. We think we detected and stopped this intrusion before any serious damage occurred.
Was this caused by malware sites? Some attacks are caused by weaknesses introduced by internal staff.
This appears to be an orchestrated intrusion from a foreign entity and not the result of any employee activities. Consequently, we have contacted both local and federal authorities.
Who did this?
The attack appears to have been launched from a foreign overseas entity. We have alerted law enforcement and are sharing forensic data with the authorities to inform any investigation they might conduct.
How will you prevent future attacks?
Internal staff is analyzing and fortifying our internal structure.
Attachments
