<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Script MT Bold";
panose-1:3 4 6 2 4 6 7 8 9 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello, Jessica Chastain shared these emails with me because you may be able to assist with a DHS-mandated project (description below).
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can you share with me any high-level information on cyber incidents between 8/1/21 and 7/31/23 in the following counties: Yamhill, Washington, Clackamas, Columbia and Multnomah, please? The information doesn’t need to go into a lot of detail
or specifics that could jeopardize an investigation (if there is one). An open-source link supporting any data would be appreciated, also.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If there is no information to share, that is perfectly fine. I appreciate your time. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><i>Project description (Request for Information: DHS-RFI-02210-23):
<o:p></o:p></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><i>(U//FOUO) CIC is disseminating this RFI to Homeland security partners to elicit their perspective and insight into cyber threats affecting stakeholders eligible under the HSGP. To this end, CIC requests information that identifies cyber
threats affecting critical infrastructure within eligible Metropolitan Statistical Areas (MSAs) during the relevant reporting period, 01 August 2021 – 31 July 2023. For cyber threat activity, we welcome non-restricted operational or investigative cyber threat
information you may have previously shared with other federal government entities over the past year including, but not limited to, those in the Intelligence Community (IC), Cybersecurity and Infrastructure Security Agency (CISA), or other DHS components.
<o:p></o:p></i></p>
<p class="MsoNormal"><i><o:p> </o:p></i></p>
<p class="MsoNormal"><i>(U//FOUO) For the purpose of this request, CIC considers cyber threats to include a range of malicious activities such as web defacements, denial of service attacks, theft of intellectual property and financial data, data corruption
or deletion, and cyber-enabled disruption or destruction of critical infrastructure. Please note the following examples: • Information about specific, verified cyber events against critical infrastructure within your respective MSA that depicts the nature
of the malicious activity; specifically, how the malicious activity occurred, against whom, when, by whom/from where, and/or the duration of the activity. • If available, please also provide detailed information regarding critical infrastructure, workforce,
or stakeholder impacts, including but not limited to whether the accessibility or delivery of key products, commodities, or services was disrupted. • CIC also values insight into malicious, intentional insider cyber threats to critical infrastructure within
your MSA. • Please highlight malicious cyber events that affected election security, impacted the integrity of Personally Identifiable Information (PII)/Personal Health Information, damaged property, or resulted in physical harm or loss of life (please specify
whether this was directly or indirectly the result of malicious cyber activity).<o:p></o:p></i></p>
<p class="MsoNormal"><i><o:p> </o:p></i></p>
<p class="MsoNormal">As a matter of introduction, I work for the Oregon TITAN Fusion Center and am assigned to the Urban Area Security Initiative (UASI)-covered region (counties mentioned above). I am assisting in gathering data to support this project.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Script MT Bold";mso-ligatures:none">Dianne Greenlee<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif;mso-ligatures:none">Urban Area Security Initiative Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Cambria",serif;mso-ligatures:none">Oregon Department of Justice | Criminal Division | Oregon TITAN Fusion Center (OTFC)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Cambria",serif;mso-ligatures:none">E-mail:
<a href="mailto:dianne.greenlee@doj.state.or.us"><span style="color:#0563C1">dianne.greenlee@doj.state.or.us</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif;mso-ligatures:none">Desk: 503.934.2033<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Cambria",serif;mso-ligatures:none">Cell: 503.932.7479<o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-family:"Cambria",serif;mso-ligatures:none">Hours: M-Th 7 – 5 pm; Fri 7-11 am<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:#1F3864;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:red;mso-ligatures:none">DISCLAIMER: This intelligence information is being passed through as a courtesy to the originating agency. The Oregon TITAN Fusion Center (OTFC) had no part in developing this
information and has not verified the contents to be factual. If you have any questions about this information, please contact the originating agency. This bulletin may contain information designated as “FOR OFFICIAL USE ONLY” (FOUO) or “LAW ENFORCEMENT SENSITIVE”
(LES) and/or controlled information pursuant to OAR 137-090-0130. DO NOT FORWARD OR DISSEMINATE WITHOUT THE ORIGINATING AGENCY’s PERMISSION. DO NOT POST TO SOCIAL MEDIA.<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F3864;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<br>
***** CONFIDENTIALITY NOTICE ***** <br>
This e-mail may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this e-mail in error, please advise
me immediately by reply e-mail, keep the contents confidential, and immediately delete the message and any attachments from your system.
<br>
<br>
************************************ <br>
</body>
</html>