Goodwill Industries of Greater New York and Northern NJ, Inc.

Goodwill Industries of Greater New York and Northern New Jersey, Inc. experienced a data breach that was first identified on October 28, 2022, due to unusual activity involving an employee’s email account. The organization took immediate steps to secure the account and initiated an investigation to understand the extent of the breach. The investigation revealed that the email account was accessed by an unknown individual between October 12 and October 29, 2022. The review process to determine the contents of the email account and the individuals affected concluded around April 13, 2023[16].

The compromised information varied by individual but may have included names, Social Security numbers, driver’s license numbers, financial account information, tax IDs, passport information, usernames and passwords, medical diagnoses and treatment information, health insurance information, and dates of birth. In response to the incident, Goodwill reported the event to federal law enforcement, reviewed and enhanced its existing policies and procedures, and offered complimentary credit monitoring services to potentially impacted individuals[16].

A class action lawsuit was filed against Goodwill Industries of Greater New York and Northern New Jersey, Inc. by former employees and job applicants, alleging negligence and other claims related to the data breach. The plaintiffs, Wendy Booker and Francis Mascaro, claimed that their personal identifiable information was compromised, which put them at risk of identity theft. They also alleged that Goodwill failed to implement industry-standard security procedures and did not promptly detect unauthorized access attempts. The lawsuit seeks monetary relief, interest, trial by jury, and other just relief[2].

Goodwill Industries of Greater New York and Northern New Jersey, Inc. is a non-profit organization that provides services and employment opportunities to individuals with disabilities and other barriers to employment[16].

Citations:

1. https://www.turkestrauss.com/2023/05/26/goodwill-industries-data-breach-investigation/
2. https://legalnewsline.com/stories/645497795-goodwill-faces-suit-over-2022-data-breach-of-employee-applicant-personal-information
3. https://casetext.com/case/graham-v-goodwill-indus-inc
4. https://www.doj.nh.gov/consumer/security-breaches/documents/goodwill-industries-new-york-new-jersey-20230531.pdf
5. https://apps.web.maine.gov/online/aeviewer/ME/40/list.shtml
6. https://goodwillnynj.org/terms-of-use/
7. https://apps.web.maine.gov/online/aeviewer/ME/40/7f385eae-4cd3-464e-b5e9-8f2fcf873ce1.shtml
8. https://goodwillnynj.org/privacy-policy/
9. https://www.linkedin.com/posts/bakerhostetler_federal-prosecutors-to-assess-procedures-activity-7047232919014162432-wHzH
10. https://www.mass.gov/doc/assigned-data-breach-number-29675-goodwill-industries-of-greater-new-york-and-northern-nj-inc/download
11. https://casetext.com/case/davison-v-goodwill-indus-of-greater-new-york-northern-new-jersey
12. https://trellis.law/doc/138783926/answer-with-cross-claim-s-answer-with-cross-claims-to-amended-complaint
13. https://dockets.justia.com/docket/new-york/nyedce/1:2023cv04764/499343
14. https://signal-ai.com/cybersecurity-corporate-reputation-healthcare-sector/
15. https://casetext.com/case/davis-v-goodwill-indus-of-greater-ny-nj-inc
16. https://goodwillnynj.org/notice-of-email-event/
17. https://www.govinfo.gov/content/pkg/USCOURTS-nyed-1_15-cv-03158/pdf/USCOURTS-nyed-1_15-cv-03158-0.pdf