MalwareProfessional ServicesProfessional ServicesPhishingRansomwareData EncryptedMulti-Stage ChainIdentity (basic)Government IDMediumContained

Gulshan Management Services

bd_4d1d56b0a51c0c71 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 27, 2025

Filed

Jan 5, 2026

To disclose

14 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

66%

Full breach record for Gulshan Management Services →

Gulshan Management Services, Inc. notified consumers of a data breach discovered on September 27, 2025, resulting from a phishing attack on September 17, 2025. The incident involved unauthorized access and the deployment of malicious software that encrypted portions of the network. Affected data included names, contact info, SSNs, and driver's license numbers. GMS engaged Kroll for credit monitoring and rebuilt systems.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 14 weeks / 100 days

Sep 17, 2025

Begins

Sep 27, 2025

Discovered

Jan 5, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_78a97382f455f0912026-01-05Candidate
Nebraska State AGbd_803e9bb6b7a2af0a2026-01-05Verified
New Hampshire State AGbd_a465700a822b3c122026-01-05Verified
Maine State AGbd_217671fec1634ed92026-01-06 · +1dVerified

Show 5 more filings ↓up to 70d gap

Iowa State AGbd_24f2f711ac332f952026-01-06 · +1dVerified
South Carolina State AGbd_62380f5de3719fcb2026-01-06 · +1dVerified
Massachusetts State AGbd_b665797329b8e3ce2026-01-06 · +1dVerified
Illinois State AGbd_d28b44efa5b75e472026-01-01 · +4dVerified
Texas State AGbd_98d92f168972093a2026-03-16 · +70dVerified

Name: Gulshan Management Services
norm: gulshan management

Name: Gulshan Management Services
norm: gulshan management
Industry: Professional Servicesllm

Discovered: Sep 27, 2025
Breach occurred: Sep 17, 2025 – Sep 27, 2025
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 5, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified regulatory authorities in relevant jurisdictions
Initial access: phishing_link

During the incident: Engaged Kroll to provide identity monitoring
Notified law enforcement and regulatory authorities
Reset all access credentials to affected networks and systems
Completely rebuilt compromised systems
Installed additional threat-monitoring software
Introduced more stringent access requirements for privileged accounts
Changes made: Reset all access credentials to affected networks and systems
Completely rebuilt compromised systems
Installed additional threat-monitoring software
Introduced more stringent access requirements for privileged accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+4d

Nebraska State AG+4d

New Hampshire State AG+4d

Vermont State AG+4d · this page

Maine State AG+5d

Iowa State AG+5d

South Carolina State AG+5d

Massachusetts State AG+5d

Texas State AG+74d

Pattern: first filing Jan 1 (IL), last Mar 16 (TX) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-01-05-gulshan-management-services-data-breach-notices-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2026
Raw hash: 37a24866e91f92f9511cc0a17f19e48a39f28aca54b7cfee247420f9f103d1fb

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityGulshan Management Services

Victim entityGulshan Management Services

Incidentdiscovered Sep 27, 2025

Stated responseEngaged Kroll to provide identity monitoring

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov