Notice of Email Event

Goodwill Notice of Email Event 

May 24th, 2023

Goodwill Industries of Greater New York and Northern NJ, Inc. (“Goodwill”) is providing notice of an email event at Goodwill. This notice provides information about the event, our response, and resources available to individuals to help protect information. 

Who is Goodwill?

Goodwill a 501(c)(3) non-profit organization that empowers individuals with disabilities and barriers to employment to gain independence through the power of work. In connection with the services it provides, and as an employer, we collect certain personal information.  

What Happened?

On October 28, 2022, we became aware of unusual activity involving an employee’s email account. We took steps to immediately secure the email account and began an investigation into the activity. The investigation determined that the email account was accessed by an unknown individual between October 12 and October 29, 2022. We reviewed the email account to determine its contents and to whom it relates. We then undertook additional steps to identify address information for purposes of providing notifications. Our investigation and review ended on or about April 13, 2023.  

What Information Was Involved?

The information in the email account varies by individual but may include any of the following types of information: name, Social Security number, Driver’s license number, financial account information, tax ID, passport information, username and password information, medical diagnosis and treatment information, health insurance information, and date of birth. 

What Goodwill Is Doing.

We take this event and the security of personal information in our care seriously. Upon discovering the unusual activity, we took steps to investigate the activity, secure the employee’s email account, reset passwords, and assess the security of the email tenant. We also reported the event to federal law enforcement. As part of our ongoing commitment to the privacy of information in our care, we are reviewing and enhancing our existing policies and procedures as necessary. We are also notifying relevant regulatory authorities. As an added precaution we are offering potentially impacted individuals access to complimentary monitoring services.  

Was I impacted by this event?

If you received a written letter from Goodwill, then your information was identified in the email account.  If you did not receive a letter from Goodwill, you may contact Goodwill at (888) 994-0275, which is available Monday through Friday from 9:00 a.m. and 11:00 p.m., and Saturday and Sunday from 11:00 a.m. to 8 p.m., Eastern Time (excluding major U.S. holidays).

What Can I Do to Protect My Information?

In general and as a best practice you may consider taking steps including the following:

• Monitor your financial statements carefully. If you see any unauthorized or suspicious activity, promptly contact your bank, credit union, or credit card company. 
• Monitor your credit reports for suspicious or unauthorized activity. Under U.S. law, consumers are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus directly to request a free copy of your credit report. 
• Place a fraud alert on your credit file. You have the right to place an initial or extended “fraud alert” on your file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert displayed on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Contact the three major credit bureaus directly to place a fraud alert on your credit file. 
• Place a credit freeze on your credit file. A credit freeze will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a credit freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a credit freeze on your credit report. Contact the three major credit bureaus directly to place a credit freeze on your credit file. 

• Contact the Federal Trade Commission and your state Attorney General. To learn more about identity theft, fraud alerts, credit freezes, and other resources you may contact the Federal Trade Commission at: 600 Pennsylvania Avenue NW, Washington, DC 20580, www.identitytheft.gov, 1-877-ID-THEFT (1-877-438-4338). 
• Report incidents of suspected or actual identity theft or fraud. These types of incidents should be reported to law enforcement, the Federal Trade Commission, and your state Attorney General. For New York residents, the New York Attorney General may be contacted at: Office of the Attorney General, The Capitol, Albany, NY 12224-0341-0341; 1-800-771-7755; or https://ag.ny.gov.  

What is the contact information for the three major credit reporting bureaus?  

Was law enforcement contacted?

Yes, we reported this event to federal law enforcement out of an abundance of caution. Notifications in this matter were not delayed due to law enforcement involvement.

Who do I contact if I still have questions?

If you have questions you may contact (888) 994-0275, which is available Monday through Friday from 9:00 a.m. and 11:00 p.m., and Saturday and Sunday from 11:00 a.m. to 8 p.m., Eastern Time (excluding major U.S. holidays).