Gallagher Transport International
bd_076950f37cd0f028 · schema v1 · pii pii-v1
Full breach record for Gallagher Transport International →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Sinobi on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Gallagher Transport International is a leading customs broker specializing in personalized and compliant freight solutions for importers and exporters. With over 25 years of experience, the company offers a full suite of services, including customs clearance, cargo insurance, and freight forwarding, while ensuring compliance with U.S. regulations. Their dedicated team focuses on proactive communication and personalized service to streamline the shipping process for clients across various industries, including FDA-regulated items, medical equipment, and specialty equipment. Gallagher Transport serves clients nationwide through multiple offices, aiming to make the transportation of goods as efficient and cost-effective as possible.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jan 27, 2026
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_5e4295600883611c2026-09-01 · +216dVerified by operator
- New Hampshire State AGbd_714bf44c584f5ab42026-09-25 · +240dVerified
- Indiana State AGbd_8f30f463a39c73d32026-09-25 · +240dCandidate
- Texas State AGbd_90fbbcb9ec2fd6ba2026-09-25 · +240dVerified
Show 2 more filings ↓Show fewer ↑up to 240d gap
- Vermont State AGbd_9a3482491f4ef4182026-09-25 · +240dVerified
- California State AGbd_c0322fa5a02cff442026-09-25 · +240dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Sep 25 (CA) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
sinobi
According to ransomware.live, Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.