Goshen Medical Center
Disclosed Sep 17, 20251 year ago456,385 affectedConfirmed
Goshen Medical Center hack exposes SSNs of 456,385 patients
North Carolina health center Goshen Medical said suspicious activity found March 4, 2025 led to confirmation that files viewed or taken on February 15 held names, addresses, birth dates, SSNs, driver's license and medical record numbers of 456,385 people.
What is known
| People affected | 456,385 (as reported by the organization) |
|---|---|
| Disclosed | Sep 17, 2025 |
| Discovered | Mar 4, 2025 |
| Happened | Feb 18, 2025 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Government IDs, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Goshen Medical Center Notifies 456,000 Individuals About Hacking Incidenthipaajournal.com · News | News |
| September 2025 Healthcare Data Breach Reporthipaajournal.com · News | News |
| Vermont Attorney General: 2025-09-17 Goshen Medical Center Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Goshen Medical Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Goshen Medical Center (Healthcare Provider, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Sep 17, 2025 | |
| Indiana AGresidents of IN | Sep 17, 2025 | 76 |
| HHS archivetotal | Sep 17, 2025 | 456,385 |
| Researchtotal | Sep 18, 2025 | 456,385 |
History of this record
- 2026-09-25 · source: empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf · backfill source
- 2026-09-25 · occurred: empty to 2025-02-18 · backfill source
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.hipaajournal.com/goshen-medical-center-survival-flight-hacking-incidents/ to https://ago.vermont.gov/document/2025-09-17-goshen-medical-center-data-breach-notice-consumers · backfill source
- 2026-09-25 · status: disclosed to confirmed · backfill source
- 2026-09-25 · verified_by: empty to vt-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · disclosed: 2025-09-18 to 2025-09-17 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.