Goodwin University Hit by Qilin Ransomware Attack, Exposing Sensitive Data of Hundreds Goodwin University, a private nonprofit institution in East Hartford, Connecticut, disclosed a ransomware attack that compromised the personal data of hundreds of individuals. The breach was first detected on December 4, 2025, when the university identified a network disruption. After engaging cybersecurity experts, Goodwin confirmed on January 7, 2026, that unauthorized access had occurred, with a full review concluding on March 20, 2026. The attack was attributed to the Qilin ransomware group, which claimed responsibility and posted about the incident on the dark web on December 28, 2025. Exposed data included names, addresses, Social Security numbers, driver’s license/state ID numbers, government-issued IDs (e.g., passport numbers), personal health information, and health insurance details. Goodwin University began notifying affected individuals via U.S. mail on April 16, 2026. The breach impacted at least 531 individuals in Texas and 151 in Maine, though the total number of affected parties remains unclear. Legal firm Shamis & Gentile P.A. is investigating potential compensation claims for those impacted.