18 Local Stores Operating with Cash-Only Policy While Investigation Continues

GRAND RAPIDS, Mich. — Goodwill of Greater Grand Rapids announced on Friday that a recent cybersecurity attack disrupted a portion of its network environment, forcing all 18 local stores to operate on a cash-only basis while staff works to restore its point-of-sale program.

The organization confirmed the attack in a public statement released Friday, March 27, saying the breach disrupted network resources used to run its local stores. Goodwill immediately notified law enforcement and brought in outside cybersecurity experts to investigate.

Store Operations Remain Open

Despite the disruption, all Goodwill of Greater Grand Rapids locations remain open for business. The organization expects the cash-only policy to remain in place for the next several days as it works to rebuild its point-of-sale program.

"We wish to thank our customers and community partners for their patience and support while we work through this issue," a Goodwill representative said in the statement.

Credit Card Data Not at Risk

An important detail for shoppers: Goodwill of Greater Grand Rapids does not store credit card data on its systems, meaning customer payment information was not at risk during the incident.

The organization has not yet confirmed a timeline for full restoration of its electronic payment systems.

Local Nonprofit, Local Systems

Goodwill organizations are local nonprofits that all operate on separate systems. This incident has no impact on Goodwill stores or organizations in other communities across the country.

Goodwill of Greater Grand Rapids operates 18 retail stores and an online shopping site across a six-county region in Michigan, including Kent, Ionia, Montcalm, Mecosta, Isabella, and a portion of Ottawa counties.

Ongoing Investigation

The organization says its investigation is ongoing, and more details may emerge as cybersecurity experts continue their work. Investigators are still working to determine the full scope of the breach.

Earlier reports characterized the incident as a ransomware attack, though Goodwill's current statement lists it more broadly as a cyberattack. Cybersecurity experts note that rebuilding a point-of-sale system is another sign that could indicate a ransomware attack was involved.

What Shoppers Need to Know

All Goodwill of Greater Grand Rapids stores are temporarily accepting cash only. The organization expects this policy to remain in place for the next several days as they work through the issue.

Customers who planned to use credit cards or contactless payment methods will need to have cash available during this time.

The organization thanked customers and community partners for their patience during the recovery process and emphasized that its stores operate on a separate system from other Goodwill organizations around the country.

About Goodwill of Greater Grand Rapids

Goodwill Industries of Greater Grand Rapids is a 501(c)(3) nonprofit organization dedicated to changing lives and communities through the power of work. Operating across a six-county region in Michigan, the organization runs 18 retail stores and an online shopping site that utilize store sales and donations to promote community growth and sustainability.

The organization's job training and placement programs assist individuals with disabilities and other employment barriers.