Data comes from company disclosures filed with the Oregon Department of Consumer and Business Services under the state's consumer privacy laws. Companies self-report this information. The Oregonian/OregonLive did not independently verify the disclosures.