HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Goodwill Industries of Southwest Oklahoma & North Texas, Inc.

bd_8ce4d169f749544b · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2024

Filed

Mar 5, 2025

To disclose

13 months

Affected · nationwide

6,0862 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Goodwill Industries of Southwest Oklahoma & North Texas, Inc. →

Goodwill Industries of Southwest Oklahoma & North Texas, Inc. reported an external system breach (hacking) on February 1, 2024, discovered February 1, 2024. Unauthorized access compromised names, SSNs, financial account numbers, driver's licenses, and medical info for 6,086 individuals. Notices sent March 5, 2025. 2 Maine residents affected. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 1, 2024 → Filed with AG Mar 5, 2025398d ✗ ME AG >90d13 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 months / 398 days

Feb 1, 2024

Begins

Feb 1, 2024

Discovered

Mar 5, 2025

Filed

vs. sector median

+49 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Nebraska State AGbd_8d3ef97bcdce3b8c2025-03-05Verified
Indiana State AGbd_937f98ba396491bd2025-03-05Verified
Maryland State AGbd_e9f260ceb3425f602025-03-05Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Goodwill Industries of Southwest Oklahoma & North Texas, Inc.
norm: goodwill industries of southwest oklahoma north texas
Industry: Otherllm

Discovered: Feb 1, 2024
Breach occurred: Feb 1, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 5, 2025
Affected individuals: 6,086state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Isolating the affected systems
Changed administrative credentials
Restored operations in a safe and secure mode
Enhanced the security measures
Engaged a specialized third-party cybersecurity firm to help secure the environment and conduct a comprehensive forensic investigation
Engaged a third-party data mining vendor to compile all of the compromised data for review
Offering twelve (12) months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company
Changes made: Enhanced the security measures
Took steps and will continue to take steps to mitigate the risk of future harm
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(398 days from discovery to filing)
Compliance flags: ME AG >90d · 398dME resident >180d · 398d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 1, 2024
→ Filed with AG: Mar 5, 2025
398d 90 days ME AG >90d
Maine
Discovered: Feb 1, 2024
→ Notified: Mar 5, 2025
398d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 1, 2024 → Filed with AG: Mar 5, 2025	398d	90 days	ME AG >90d
Maine	Discovered: Feb 1, 2024 → Notified: Mar 5, 2025	398d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Nebraska State AGMar 5 · first

Indiana State AGMar 5 · first

Maryland State AGMar 5 · first

Maine State AGMar 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7a6172f-2962-4c2c-a160-63b82618a245.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2025
Raw hash: e9debe5656a6339047a6f6223c9c019066bea1c546195f005f0a044a1c5d0a5e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityGoodwill Industries of Southwest Oklahoma & North Texas, Inc.

Incidentdiscovered Feb 1, 2024

Stated responseIsolating the affected systems

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov