Goodwill
Data Breach on August 31, 2023
| Data Breach Report | ||
|---|---|---|
| Victim | goodwill.org | |
| Threat Actor | Karakurt | |
| Date Discovered | Aug 31, 2023 | |
| Description | Goodwill Industries International Inc., or shortened to Goodwill, is a North America’s leading nonprofit provider of education, training, and career services for people with disadvantages, such as welfare dependency, homelessness, and lack of education or work experience, as well as those with physical, mental and emotional disabilities. | |
| Leak Size | Unknown |
Credential Exposure for goodwill.org
We've indexed 342 @goodwill.org accounts from external breaches, plus 127 credentials for goodwill.org itself.
Last checked Aug 16, 2026
| @goodwill.org addresses from external breaches | |
|---|---|
| Third-party breaches | 340 accounts · across 78 breaches · 286 with a plaintext password · most recent Aug 18, 2024 |
| Combo lists | 71 accounts · most recent Aug 6, 2026 |
| Passwords for goodwill.org accounts | |
|---|---|
| Combo lists | 96 logins · most recent Aug 15, 2026 |
| Infostealer logs | 33 logins · 33 infected devices · most recent Aug 7, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Goodwill was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.