MalwareTechnologyInformationRansomwareData EncryptedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Gensco, Inc.

bd_1dac50884cd594ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 6, 2022

Filed

Nov 17, 2022

To disclose

6 weeks

Affected

42state residents only

Linked

2 filings

Confidence

66%

Full breach record for Gensco, Inc. →2 incidents on file

Gensco, Inc. disclosed a ransomware attack occurring on or about June 30, 2022, discovered on October 6, 2022. The incident exposed personal information including names, addresses, DOBs, SSNs, driver's license numbers, financial account details, and medical information. Gensco engaged a cybersecurity firm for investigation and offered 12 months of identity theft protection via IDX to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d6 weeks discovery → filing

Incident timeline

undetected · 98 days

discovery → filing · 6 weeks / 42 days

Jun 30, 2022

Begins

Oct 6, 2022

Discovered

Nov 17, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 2 filings about the same incident.View merged incident

A leak claim by ragnarlocker about this victim was first seen 121 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_2e55400d03c31c4e2022-11-17Verified

Name: Gensco, Inc.
norm: gensco

Name: Gensco, Inc.
norm: gensco
Industry: Technologyllm

Discovered: Oct 6, 2022
Breach occurred: Jun 30, 2022
Undetected for: 98 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 17, 2022
Affected individuals: 42state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Hired a specialized cybersecurity firm to investigate to determine the nature and scope of the attack
Offering identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 17 · first

Montana State AGNov 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-715.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 17, 2022
Raw hash: 4ab630df3f30a7ac07f25716da4142c0981d7f7bf0b98d57752c5c9c91c42db3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGensco, Inc.

Victim entityGensco, Inc.

Incidentdiscovered Oct 6, 2022

Stated responseHired a specialized cybersecurity firm to investigate to determine the nature and scope of the attack

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov