HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Goodwill Industries of the Southern Piedmont, Inc.
bd_53d68717d43017cf · schema v1 · pii pii-v1
Full breach record for Goodwill Industries of the Southern Piedmont, Inc. →Goodwill Industries of the Southern Piedmont, Inc. reported an external system breach that occurred from April 5, 2021, to May 17, 2022, and was discovered on March 20, 2023. The incident, described as hacking, affected 67,864 individuals and compromised names and Social Security numbers. In response, the organization provided written notifications to affected consumers starting March 24, 2023, and offered 12 months of credit monitoring services through IDX.
Maine clockDiscovered Mar 20, 2023 → Filed with AG Mar 24, 20234d ✓ ME AG ≤30d4 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_02ccb65d22ef5a0bNew Hampshire State AGfiled 2023-03-24Verified
- bd_3836f5bc85249ac4Montana State AGfiled 2023-03-24Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2de8f6a1-c3b2-4b16-8ab7-b09c24124b4f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2023
- Raw hash
- 7f6ccbf923ef0f4594d57a1572ab103d84d7f2c8ea5ed256ba6f5e2ae9584eaf
Reporting entity
- Name
- Goodwill Industries of the Southern Piedmont, Inc.norm: goodwill industries of the southern piedmont
Victim entity
- Name
- Goodwill Industries of the Southern Piedmont, Inc.norm: goodwill industries of the southern piedmont
Incident
- Discovered
- Mar 20, 2023
- Materiality determined
- —
- Notification sent
- Mar 24, 2023
- Affected individuals
- 67,864
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 4 days(4 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 4d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 20, 2023→ Filed with AG: Mar 24, 20234d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.