Goshen Medical Center goshenmedical.org Goshen Medical Center data breach: what happened and what to do
Goshen Medical Center, a North Carolina health provider, reported a breach affecting 456,385 people. The Maine Attorney General lists the breach date as February 15, 2025. Reported data includes names, Social Security numbers, driver's license numbers and medical record numbers.
View all 13,115 breaches- Breach date
- 15 Feb 2025
- Affected
- 456,385
- Data exposed
- Names, Physical addresses, Dates of birth, Social security numbers, Driver's licenses, Medical record numbers
- Last updated
Goshen Medical Center is a North Carolina health care provider. In September 2025 it reported to federal regulators that a hacking incident exposed the protected health information of 456,385 people.
What happened
The Maine Attorney General's breach portal lists the breach date as February 15, 2025 and the discovery date as September 12, 2025. Press coverage says suspicious activity was spotted on March 4, 2025, and that Goshen learned in September that personal health information was in the affected files. HHS classifies the incident as hacking or an IT incident. Goshen told HHS, affected individuals and the media.
The ransomware group BianLian claimed the attack on its leak site in March 2025, according to Comparitech. Goshen has not confirmed that claim.
What was exposed
HHS says the information involved demographic data. Comparitech reports names, addresses, dates of birth, Social Security numbers, driver's license numbers and medical record numbers. Your letter lists what applies to you.
Social Security numbers with dates of birth are the core of identity theft. Medical record numbers can be used in insurance fraud and to make fake clinic calls sound real.
The company's response
Goshen says it added administrative, technical and security safeguards. Its notice reportedly found no evidence the data was misused, and it gave guidance on monitoring credit reports.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.
- 2
Review your credit reports
Pull your free reports at annualcreditreport.com and look for accounts you didn't open.
- 3
Check insurance statements
Look at explanations of benefits for care you didn't receive and report anything odd to your insurer.
- 4
Be wary of calls about your care or bills
Scammers use real record details to sound legitimate. Hang up and call the clinic on a number from its website.
- 5
Check whether your email or phone is in this and other breaches
A free Serus scan checks breach databases for your email and phone number and tells you what to do about what it finds. Serus can't remove data from a breach, but it alerts you when your details turn up.
Frequently asked
Was I affected by the Goshen Medical Center data breach?
Goshen mailed notices to affected people. If you were a patient and got no letter, contact the center.
How many people were affected?
456,385 people, per the HHS and Maine Attorney General listings.
What was exposed?
Reported data includes names, addresses, dates of birth, Social Security numbers, driver's license numbers and medical record numbers.
Is there a settlement?
None of our sources reports one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
