HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Goshen Medical Center
bd_e392d7437607ec5d · schema v1 · pii pii-v1
Full breach record for Goshen Medical Center →Goshen Medical Center notified consumers of a data breach where unauthorized access occurred on February 15, 2025, detected on March 4, 2025. Personal health information, SSNs, driver's licenses, and names were potentially compromised. The organization engaged cybersecurity specialists, offered credit monitoring via Epiq, and implemented additional security measures. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 214 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_a33c1e431cf7c55aLeak Sitebianlianfiled 2025-03-22(178d gap)Verified
- bd_3e121902466c20bfLeak Sitebianlianfiled 2025-02-15(214d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_3f2a93709f58d2eaMontana State AGfiled 2025-09-17Candidate
- bd_5e7d71e199eab35dMaine State AGfiled 2025-09-17Verified by operator
- bd_18642ee281783b6bSouth Carolina State AGfiled 2025-09-18(1d gap)Verified
- bd_761bf5eafbe89ff2Texas State AGfiled 2025-09-18(1d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-17-goshen-medical-center-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 17, 2025
- Raw hash
- 557c9f83b3e520874de6bd8278d304f4c2f83f771b5269f1130a30c943a09c77
Reporting entity
- Name
- Goshen Medical Centernorm: goshen medical center
- Domain
- goshenmedical.org
Victim entity
- Name
- Goshen Medical Centernorm: goshen medical center
- Domain
- goshenmedical.org
Incident
- Discovered
- Mar 4, 2025
- Materiality determined
- —
- Notification sent
- Sep 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 28 weeks(197 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.