HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIHighContained
Goshen Medical Center
bd_18642ee281783b6b · schema v1 · pii pii-v1
Full breach record for Goshen Medical Center →Goshen Medical Center notified South Carolina regulators on September 17, 2025, of a data security incident affecting approximately 5,234 residents. Unauthorized access occurred on February 15, 2025, exposing names, addresses, DOBs, SSNs, driver's license numbers, and medical record numbers. The incident was detected on March 4, 2025. GMC engaged cybersecurity specialists, provided 12 months of credit monitoring via Equifax, and is implementing additional employee safeguards.
Leak gap clock✗ Leak >180d28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 215 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_a33c1e431cf7c55aLeak Sitebianlianfiled 2025-03-22(179d gap)Verified
- bd_3e121902466c20bfLeak Sitebianlianfiled 2025-02-15(215d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_761bf5eafbe89ff2Texas State AGfiled 2025-09-18Verified by operator
- bd_3f2a93709f58d2eaMontana State AGfiled 2025-09-17(1d gap)Candidate
- bd_5e7d71e199eab35dMaine State AGfiled 2025-09-17(1d gap)Verified by operator
- bd_e392d7437607ec5dVermont State AGfiled 2025-09-17(1d gap)Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Notice%20-%20Goshen%20Medical%20Center.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 18, 2025
- Raw hash
- aa351b1f1df7bfdf95fcf0785d739b0e9db8ccfc3fa09d7048d5854fa3e5d787
Reporting entity
- Name
- Goshen Medical Centernorm: goshen medical center
- Domain
- goshenmedical.org
Victim entity
- Name
- Goshen Medical Centernorm: goshen medical center
- Domain
- goshenmedical.org
Incident
- Discovered
- Mar 4, 2025
- Materiality determined
- Sep 17, 2025
- Notification sent
- Sep 17, 2025
- Affected individuals
- 5,234
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified South Carolina Department of Consumer Affairs
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.