HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighContained

Goodwill Industries of Southwest Oklahoma & North Texas, Inc.

bd_e9f260ceb3425f60 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 1, 2024

Filed

Mar 5, 2025

To disclose

—

Affected · nationwide

6,0867 in this filing

Linked

4 filings

Confidence

67%

Full breach record for Goodwill Industries of Southwest Oklahoma & North Texas, Inc. →

Goodwill Industries of Southwest Oklahoma & North Texas, Inc. detected unauthorized access to its network on February 1, 2024. An unauthorized actor accessed files containing sensitive personal information of approximately 6,086 current and former clients, including names, SSNs, financial account numbers, and medical information. Seven Maryland residents were affected. The organization contained the intrusion, engaged forensic investigators, and is offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 months / 398 days

Feb 1, 2024

Discovered

Mar 5, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_8ce4d169f749544b2025-03-05Candidate
Nebraska State AGbd_8d3ef97bcdce3b8c2025-03-05Verified
Indiana State AGbd_937f98ba396491bd2025-03-05Verified

Name: Goodwill Industries of Southwest Oklahoma & North Texas, Inc.
norm: goodwill industries of southwest oklahoma north texas
Domain: wilsonelser.com

Name: Goodwill Industries of Southwest Oklahoma & North Texas, Inc.
norm: goodwill industries of southwest oklahoma north texas
Industry: Professional Servicesllm

Discovered: Feb 1, 2024
Materiality determined: —
Notification sent: Mar 5, 2024
Affected individuals: 6,086state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Maryland Office of the Attorney General

During the incident: Immediately took steps to contain the intrusion
Engaged a specialized third-party cybersecurity firm to help secure the environment and conduct a comprehensive forensic investigation
Isolated the affected systems
Changed administrative credentials
Restored operations in a safe and secure mode
Enhanced the security measures
Offering twelve (12) months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company
Provided guidance on how to better protect against identity theft and fraud
Changes made: Enhanced the security measures
Took steps and will continue to take steps to mitigate the risk of future harm
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 5 · first

Nebraska State AGMar 5 · first

Indiana State AGMar 5 · first

Maryland State AGMar 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376510.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2025
Raw hash: 7dc07770e2115b38f8f14dff8dbb0311eac975f0f2c10eeb1ef27e1b560d4c77

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGoodwill Industries of Southwest Oklahoma & North Texas, Inc.

Victim entityGoodwill Industries of Southwest Oklahoma & North Texas, Inc.

Incidentdiscovered Feb 1, 2024

Stated responseImmediately took steps to contain the intrusion

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov