Goodwill Industries of Greater New York and Northern NJ, Inc.

The Maine Office of the Attorney General reported that Goodwill Industries of Greater New York and Northern NJ, Inc. experienced a data breach due to external system access (hacking) between October 12 and October 29, 2022. The breach was discovered on April 13, 2023, affected a total of 10,572 individuals, specifically involving personal information such as names and Social Security numbers. Goodwill provided written notification to residents on May 24, 2023, and offered 24 months of credit monitoring services through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7f385eae-4cd3-464e-b5e9-8f2fcf873ce1.shtml

TPRM report: https://www.rankiteo.com/company/goodwill-nynj

"id": "goo432072525",
"linkid": "goodwill-nynj",
"type": "Breach",
"date": "10/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 10572,
                        'industry': 'Retail',
                        'location': 'New York and Northern NJ',
                        'name': 'Goodwill Industries of Greater New York and '
                                'Northern NJ, Inc.',
                        'type': 'Non-profit Organization'}],
 'attack_vector': 'External System Access (Hacking)',
 'data_breach': {'number_of_records_exposed': 10572,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2023-04-13',
 'date_publicly_disclosed': '2023-05-24',
 'description': 'Goodwill Industries of Greater New York and Northern NJ, Inc. '
                'experienced a data breach due to external system access '
                '(hacking) between October 12 and October 29, 2022. The breach '
                'was discovered on April 13, 2023, affected a total of 10,572 '
                'individuals, specifically involving personal information such '
                'as names and Social Security numbers. Goodwill provided '
                'written notification to residents on May 24, 2023, and '
                'offered 24 months of credit monitoring services through '
                'Experian.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notification to residents and '
                                        'offer of 24 months of credit '
                                        'monitoring services through Experian'},
 'title': 'Goodwill Industries of Greater New York and Northern NJ Data Breach',
 'type': 'Data Breach'}