MalwareOtherRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHighActive

The Gill Corporation

bd_3b0d30f9d1670a8c · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 23, 2024

Filed

Sep 19, 2024

To disclose

13 weeks

Affected · nationwide

3,2321 in this filing

Linked

6 records

Confidence

66%

Full breach record for The Gill Corporation →

The Gill Corporation reported a cyber-attack on June 23, 2024, where an unauthorized third party compromised systems and encrypted files. The incident affected 3,232 individuals, including 1 Maine resident. Personal information accessed included names, SSNs, driver's license numbers, and bank account numbers of former employees. The company engaged in remediation and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 23, 2024 → Filed with AG Sep 19, 202488d ⏱ ME AG >30d13 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 weeks / 88 days

Jun 23, 2024

Begins

Jun 23, 2024

Discovered

Sep 19, 2024

Filed

vs. sector median

+7 wks slower

This filing is one of 6 records about the same incident.View merged incident

A leak claim by hunters_international about this victim was first seen 52 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehunters_internationalbd_391db4844b89b4632024-07-29 · +51dCandidate

Regulatory filings (4) · sorted by filing gap

California State AGbd_60cbe259238066912024-09-19Candidate
Vermont State AGbd_95d9dc0ebe1ad7302024-09-19Verified
Massachusetts State AGbd_decf30a95b7aa4522024-09-19Verified by operator
Indiana State AGbd_8efead134a7b03702024-09-16 · +3dVerified by operator

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com
Industry: Otherllm

Discovered: Jun 23, 2024
Breach occurred: Jun 23, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 16, 2024
Affected individuals: 3,232state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: external_remote_services

During the incident: Identified the vulnerability that was exploited by the third party and removed it from TCG’s systems
Deployed additional protective measures to secure TGC’s systems
Offering 12 months of complimentary credit monitoring through Experian IdentityWorks
Changes made: Examining additional protective measures to help prevent incidents of this kind in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: ME AG >30d · 88dME resident >60d · 85dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 23, 2024
→ Filed with AG: Sep 19, 2024
88d 30 days (soft) ME AG >30d
Maine
Discovered: Jun 23, 2024
→ Notified: Sep 16, 2024
85d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 23, 2024 → Filed with AG: Sep 19, 2024	88d	30 days (soft)	ME AG >30d
Maine	Discovered: Jun 23, 2024 → Notified: Sep 16, 2024	85d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 16 · first

California State AG+3d

Vermont State AG+3d

Massachusetts State AG+3d

Maine State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c1fc27fa-c437-4425-9154-01c6e8a04e71.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: 191ecfefc37a53e13f317bb695174753356557ef5655d80b1060b2f19f4bd956

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Gill Corporation

Victim entityThe Gill Corporation

Incidentdiscovered Jun 23, 2024

Stated responseIdentified the vulnerability that was exploited by the third party and removed it from TCG’s systems

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov