Goshen Medical Center announces data breach affecting 456K individuals

Goshen Medical Center recall overview:

• Who: Goshen Medical Center is notifying 456,385 individuals about a data breach.
• Why: An unauthorized entity potentially gained access to sensitive personal and health information.
• Where: The breach affects individuals in the United States, specifically in eastern North Carolina.

Goshen Medical Center has issued a notification to more than 456,000 individuals following a data breach that exposed sensitive personal and health information. 

The breach was discovered March 4, 2025, when suspicious activity was detected within the center’s network. An investigation revealed that unauthorized access to the network occurred on Feb. 15, 2025, potentially compromising files containing personal data.

The breach notification was sent out after a thorough review of the affected data, which concluded Sept. 12, 2025. The compromised information includes patient names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and medical record numbers. 

“We deeply regret any worry or inconvenience that this may cause you,” the notification says.

Goshen Medical Center has taken steps to prevent future incidents by enhancing its security measures. Additionally, the center is offering up to 24 months of complimentary credit monitoring and identity theft protection services through Epiq Privacy Solutions ID Standard. 

Goshen Medical Center strengthens security measures after data breach

The data breach at Goshen Medical Center has prompted the organization to implement additional safeguards to protect patient information.

 “We promptly initiated an investigation of the matter and engaged cybersecurity specialists to assist with the incident response,” the notification says.

In response to the breach, Goshen Medical Center is offering affected individuals complimentary credit monitoring and identity protection services. These services include credit monitoring with alerts, credit report lock/freeze, dark web monitoring, identity restoration, and change of address monitoring. 

To enroll in these services, individuals can visit www.privacysolutionsid.com and follow the provided instructions. The center has also set up a dedicated hotline for questions or assistance, available at 877-396-3238, Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern time.

Goshen Medical Center reports that no evidence of misuse or attempted misuse of the compromised information has been found. The organization is not currently facing legal action over the data breach, but similar incidents have previously led to class action lawsuits.

In other recent data breaches compromising medical information, Highlands Oncology Group disclosed a ransomware attack Aug. 1 affecting more than 113,000 patients.

Are you affected by the Goshen Medical Center recall? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• FTC refunds issued in September 2025: Who’s getting paid?
• California jury finds Uber negligent but not liable in sexual assault case
• Google, Flo Health reach $56M class action settlement to claims they shared period-tracking app data
• Zillow class action claims company charges hidden fees to homebuyers