Skip to content
Leak-site post naming Goodwill, captured by ThreatCluster

Goodwill

interlock

Ransomware leak-site victim intelligence

Data size
80 GB
Posted
Mar 26, 2026
Country
US
Industry
Consumer Services

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Interlock claims that 80 GB of data from Goodwill Industries of North Central Pennsylvania (domain goodwillinc.org) has been leaked. The group states the data includes hundreds of pieces of personal data belonging to employees and partners, as well as financial documents. The leak is listed on the group’s site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Goodwill Industries of North Central Pennsylvania is dedicated to turning donations into jobs, providing employment for more than 700 people across 15 counties in Pennsylvania and one county in New York. However, they have been extremely negligent and irresponsible regarding security, resulting in the compromise and online leak of hundreds of pieces of personal data belonging to employees and partners, as well as financial documents.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture