HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
Goodwill Industries of Greater New York and Northern NJ, Inc.
bd_b4518d118b65809d · schema v1 · pii pii-v1
Full breach record for Goodwill Industries of Greater New York and Northern NJ, Inc. →Goodwill Industries of Greater New York and Northern NJ, Inc. notified the NH AG of an unauthorized access to an employee email account. Access occurred between Oct 12-29, 2022; detected Oct 28, 2022. 4 NH residents affected. PII involved. Goodwill secured the account, notified law enforcement, and offered 24 months of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cc712db3d1740f17Vermont State AGfiled 2023-05-24(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/goodwill-industries-new-york-new-jersey-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2023
- Raw hash
- 1fbd748cde82c056e84f7bd2338c665c4e045a89a33131f24064886d36d6a652
Reporting entity
- Name
- Goodwill Industries of Greater New York and Northern NJ, Inc.norm: goodwill industries of greater new york and northern nj
- Domain
- goodwillnynj.org
Victim entity
- Name
- Goodwill Industries of Greater New York and Northern NJ, Inc.norm: goodwill industries of greater new york and northern nj
- Domain
- goodwillnynj.org
Incident
- Discovered
- Oct 28, 2022
- Materiality determined
- Apr 13, 2023
- Notification sent
- May 24, 2023
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProvided written notice to relevant state regulatorsNotified the U.S. Department of Health and Human Services
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 31 weeks(215 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.