Goodwin Living recently reported a data breach to the Attorney General of Maine, revealing that sensitive personal identifiable information (PII) and protected health information (PHI) may have been accessed and acquired. The breach was discovered after suspicious activity was detected in the company’s email environment. Following an investigation, Goodwin Living confirmed that the incident occurred between October 2 and October 18, 2023, when an unauthorized party gained access to an employee’s email account.
The type of information potentially exposed varies depending on the individual but includes names, Social Security numbers, addresses, dates of birth, contact information, driver’s license numbers, military identification numbers, financial account details, medical records, health insurance information, and Medicare or Medicaid numbers. After learning about the breach, Goodwin Living began a thorough review to determine the specific data affected and the individuals impacted by the incident.
On August 29, 2024, Goodwin Living started mailing data breach notification letters to those affected, informing them about the type of information compromised. In response to the breach, Goodwin Living is offering 12 months of complimentary credit monitoring services to the impacted individuals. These services aim to help safeguard against potential identity theft and other fraudulent activity.
Goodwin Living, a non-profit senior living and healthcare organization based in Virginia, has taken steps to address the situation and protect the personal information of its community. The organization serves over 2,500 older adults in Northern Virginia, Washington, DC, and Maryland, while its programs support more than 25,000 older adults nationwide. Founded in 1967, Goodwin Living continues to provide senior care and health services, employing over 1,200 staff members across its operations.
Reference: