Goshen Health

Goshen Health is a healthcare organization headquartered in the United States of America. It provides medical services to patients and manages associated health information. As a health system, it operates facilities that deliver clinical care, diagnostic services, and patient support. The organization handles personal health data, including names, addresses, dates of birth, physician details, health insurance information, and limited clinical details. Its core function involves the delivery of healthcare and the stewardship of patient records. Goshen Health serves the local community where its facilities are located, though specific patient volume or geographic reach is not disclosed in the source material. The organization is subject to healthcare regulations governing the protection of patient information. It employs staff who access electronic communications as part of their duties. These operational aspects were highlighted in a 2018 security incident involving employee email accounts. The organization's role in healthcare necessitates adherence to privacy and security standards.

In August 2018, an unauthorized party potentially accessed two employee email accounts at Goshen Health over a period of time. Initial assessment did not trigger patient notification, but a later forensic review indicated possible exposure of patient information. The data that may have been compromised included names, addresses, dates of birth, physician details, health insurance data, limited clinical information, Social Security numbers, and driver's license numbers. Goshen Health notified affected individuals more than a year after the incident and offered complimentary identity theft protection services to those whose sensitive identifiers were exposed. Remedial steps taken by the organization consisted of password resets, enhanced email security protocols, engagement of forensic experts, and staff phishing awareness training. No evidence confirmed that the unauthorized party actually viewed or acquired any personal data. The incident underscored the organization's need to strengthen email security and employee awareness. Goshen Health's headquarters remains located in the United States of America. The organization's response to the breach reflects its approach to incident management and patient communication. These facts constitute the publicly known details about Goshen Health's operations and security posture.