Skip to content

Goodwill Industries of Greater New York and Northern NJ

Disclosed May 24, 20233 years ago10,172 affectedConfirmed

Official notice

The covered entity (CE), Goodwill Industries of Greater New York and Northern NJ, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 10,172 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, treatment information, and financial information. The CE notified HHS, the affected individuals, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected10,172 (as reported to HHS)
DisclosedMay 24, 2023
AttackHacking
Data exposedNames, Health
SectorManufacturing · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Vermont AGresidents of VTMay 24, 2023
HHS archivetotalMay 24, 202310,172
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 10172 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Goodwill Industries of Greater New York and Northern NJ, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 10,172 individuals. The PHI invo · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Goodwill Industries of Greater New York and Northern NJ

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.