On February 20, 2025, Goodwill North Central Texas reported to the Attorney General of Texas that it had experienced a data breach. The breach potentially compromised sensitive personal identifiable information (PII) and protected health information (PHI) stored in its systems, with unauthorized third-party access being the cause. As of that date, Goodwill North Central Texas had not provided further details about the nature or extent of the breach, leaving many aspects unclear. However, the organization did confirm that individuals affected by the breach would be notified.
The types of exposed information include a range of personal and financial details.
This could involve names, social security numbers, addresses, dates of birth, driver’s license numbers, government-issued ID numbers, and medical information. In addition, sensitive financial information such as account numbers, and credit or debit card information, could also have been affected. Health insurance information was also part of the potentially exposed data, making the breach particularly concerning for individuals whose medical privacy may have been compromised.
Goodwill North Central Texas, a not-for-profit organization based in Fort Worth, Texas, provides job training and related services, especially for people with disabilities and disadvantages. With 26 retail locations across 18 counties in the region, Goodwill North Central Texas serves a significant portion of the community. Founded in 1949, the organization has employed over 500 people, making this breach impactful not only for the individuals whose information was exposed but also for the organization’s reputation and operations.
In response to the breach, Goodwill North Central Texas has started notifying those whose information may have been accessed. While the full details of the breach remain under investigation, the organization is working to resolve the situation and mitigate any further damage. The report to the Attorney General marks an initial step in addressing the breach, with ongoing communication expected as more information is made available to the public.
Reference: