MalwareManufacturingManufacturingRansomwareStolen CredentialsData ExfiltratedRansom DemandedIdentity (basic)Government IDEmploymentMediumActive

Golden Artist Colors

bd_4779aa79453ce16a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 7, 2025

Filed

Dec 5, 2025

To disclose

28 days

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Golden Artist Colors →

Golden Artist Colors, Inc. notified employees of a ransomware incident discovered on November 7, 2025. Unauthorized access via stolen credentials led to data encryption and exposure of employee PII (SSN, DOB, payroll). GAC is investigating, working with law enforcement, and offering one year of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Nov 7, 2025

Discovered

Dec 5, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenitrogenbd_b052860427c663862025-12-03 · +1dVerified

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_4fa5ba374f5a25552025-12-05Verified

Name: Golden Artist Colors
norm: golden artist colors
Domain: goldenartistcolors.com

Name: Golden Artist Colors
norm: golden artist colors
Domain: goldenartistcolors.com
Industry: Manufacturingllm

Discovered: Nov 7, 2025
Materiality determined: —
Notification sent: Dec 5, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Identified the threat
Took action to block unauthorized users from accessing GAC’s systems
Launched an investigation
Working with law enforcement
Changes made: Working to constantly evaluate security protocols and processes to prevent future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGDec 5 · first

Montana State AGDec 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2026/01/Consumer-notification-letter-23.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2025
Raw hash: 4c416d6b5def152054254ee4d963aa4d70fbd88e6007f70612c09b9b58ba97d7

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityGolden Artist Colors

Victim entityGolden Artist Colors

Incidentdiscovered Nov 7, 2025

Stated responseIdentified the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov