In January-February 2022, Avamere Health Services — a Wilsonville, Oregon-based managed services provider for senior living, skilled nursing, and rehabilitation facilities — experienced a cybersecurity incident that expo sed data for residents and patients across approximately 75 affiliated healthcare organizations. Affected orga nizations included A-One Home Health Services, Bend Transitional Care, Infinity Rehab, Salem Transitional Care , and dozens of Avamere-managed facilities across the Pacific Northwest. Exposed data included patient names, Social Security numbers, dates of birth, addresses, health insurance information, and clinical data. HHS OCR b reach notifications were filed by Avamere and multiple affiliated entities. The breach illustrates the concent ration risk of healthcare management services providers that simultaneously hold PHI for multiple facilities.