Goshen Medical Center data breach (2025)

Breach window
Feb 15, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discovered
Mar 4, 2025
Reported by NEW HAMPSHIRE AG filing
197 days
⛰️New Hampshire State AGFirst filinglinked via same-victim cross-source · 100%
Filed Sep 17, 2025bd_4f1a0667685dff01
Goshen Medical Center notified the New Hampshire Attorney General of a data security incident affecting approximately 30 NH residents. Unauthorized access to files occurred on February 15, 2025, detected on March 4, 2025. Data involved included names, addresses, DOBs, SSNs, driver's license numbers, and medical record numbers. GMC engaged cybersecurity specialists, provided 12 months of credit monitoring, and implemented additional employee safeguards.
Affected (this filing): 30
Leak >180d
🏎️Indiana State AGlinked via same-victim cross-source · 100%
Filed Sep 17, 2025bd_87bc6b8ceac856f3
Goshen Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-18 and was reported on 2025-09-17. 76 Indiana residents were affected. 456,385 individuals affected in total.
Affected (this filing): 456,385
Leak >180d
NCHHS OCRMost recentlinked via same-victim cross-source · 100%
Filed Sep 17, 2025bd_97e80ec997b73cd9
Goshen Medical Center reported to HHS on 2025-09-17 a Hacking/IT Incident affecting 456,385 individuals. Breached information located on Network Server. The PHI involved demographic information. The CE implemented additional administrative, technical, and security safeguards.
Affected (this filing): 456,385

Goshen Medical Center

Litigation Timing

Timeline