Goshen Medical Center Listed by BianLian Ransomware Group

On February 15, 2025, Goshen Medical Center appeared on the leak site of the BianLian ransomware group. The North Carolina healthcare provider, which operates 38 locations serving patients across the eastern part of the state, had internal files exfiltrated during a ransomware attack. Public reporting indicates that patient and employee data may have been among the stolen material, though the exact number of individuals affected remains unknown.

Reported Details of the Breach

Available reporting describes the incident as a classic ransomware deployment followed by data exfiltration. BianLian posted Goshen Medical Center to its dark-web leak page, a common tactic used to pressure victims into payment. The organization is a Federally Qualified Health Center providing primary care, dental, behavioral health, and pharmacy services. No official statement from Goshen confirming the volume or precise categories of data has been released, but healthcare organizations routinely store names, addresses, dates of birth, Social Security numbers, medical records, and insurance details.

February 15, 2025 marks the date the listing became public. The breach falls into the high-severity category because healthcare data, once exposed, retains value to identity thieves for years.

Why This Matters for You and Your Family

If you or anyone in your household has received care at any of Goshen Medical Center’s 38 locations, your personal and medical information could now sit in the hands of criminals. Medical data is especially sensitive: it can be used to file fraudulent insurance claims, obtain prescription drugs, or impersonate you when dealing with government agencies. A single breach like this often becomes the starting point for broader identity theft that touches checking accounts, tax filings, and even your children’s records if they were treated as patients.