HackingCustomer Data InvolvedLowContained
Gulshan Management Services
bd_217671fec1634ed9 · schema v1 · pii pii-v1
Full breach record for Gulshan Management Services →Gulshan Management Services, Inc. reported a data breach affecting 54 Maine residents, which was discovered on September 27, 2025. The breach occurred between September 17, 2025 and September 27, 2025 and was described as an external system breach (hacking). The company offered 12 months of identity monitoring services to affected individuals.
Maine clockDiscovered Sep 27, 2025 → Filed with AG Jan 6, 2026101d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_24f2f711ac332f95Iowa State AGfiled 2026-01-06Verified
- bd_62380f5de3719fcbSouth Carolina State AGfiled 2026-01-06Verified
- bd_4d1d56b0a51c0c71Vermont State AGfiled 2026-01-05(1d gap)Verified
- bd_78a97382f455f091Indiana State AGfiled 2026-01-05(1d gap)Candidate
Show 2 more filings ↓Show fewer ↑up to 69d gap
- bd_a465700a822b3c12New Hampshire State AGfiled 2026-01-05(1d gap)Verified
- bd_98d92f168972093aTexas State AGfiled 2026-03-16(69d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f697cde0-79d1-48bd-99f0-23db695fc166.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 6, 2026
- Raw hash
- 2f9b6dc1d0b74ea5b311e5bd15277491ea2cc9e0b6247ff038053dc8f4b744bb
Reporting entity
- Name
- Gulshan Management Servicesnorm: gulshan management
Victim entity
- Name
- Gulshan Management Servicesnorm: gulshan management
Incident
- Discovered
- Sep 27, 2025
- Materiality determined
- —
- Notification sent
- Jan 5, 2026
- Affected individuals
- 54
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- ME AG >90d · 101dME resident >60d · 100d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 27, 2025→ Filed with AG: Jan 6, 2026101d 90 days ME AG >90d Maine Discovered: Sep 27, 2025→ Notified: Jan 5, 2026100d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.