Strauss Borrelli PLLC, a leading data breach law firm, is investigating Goodwin House Incorporated, which does business as Goodwin Living, regarding its recent data breach. The Goodwin Living data breach may have involved sensitive personal identifiable information and protected health information belonging to an undetermined number of individuals.
ABOUT GOODWIN HOUSE INCORPORATED D/B/A GOODWIN LIVING:
Goodwin Living is a non-profit senior living and healthcare organization based in Virginia. Founded in 1967, Goodwin Living offers a variety of different living and care options to seniors, including independent living, assisted living, memory care, and health care.4 Additionally, Goodwin Living provides hospice, home health, and rehabilitation services to individuals throughout Northern Virginia.4 Today, Goodwin Living’s community includes more than 2,500 older adults in the National Capital Region (Northern Virginia, Washington, DC, and Maryland) and more than 25,000 older adults across the nation who participate in Goodwin Living’s brain health programs.4 Headquartered in Alexandria, Virginia, Goodwin Living employs over 1,200 individuals.
WHAT HAPPENED?
Recently, Goodwin Living reported to the Attorney General of Maine that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. According to the breach notice, Goodwin Living recently discovered suspicious activity within its email environment. As a result, Goodwin Living launched an investigation to determine the nature of the incident.
Through its investigation, Goodwin Living learned that sensitive personal information in its systems may have been viewed or taken by an unauthorized actor through an employee’s email account between October 2 and October 18, 2023. As a result, Goodwin Living began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Contact information (e.g., phone number, email address)
- Driver’s license number
- Military identification number
- Financial account information
- Medical information (e.g., medical record number, patient and/or resident identification number, medical diagnosis and treatment information, prescription information, provider name)
- Health insurance information
- Medicare and/or Medicaid number
On August 29, 2024, Goodwin Living began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, Goodwin Living is providing affected individuals with a list of the specific type of sensitive information impacted and 12 months of complimentary credit monitoring services. A link to the form breach notification letters that Goodwin Living filed with the Attorney General of Maine is below.
If you received a breach notification letter from Goodwin House Incorporated d/b/a Goodwin Living:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
