MalwareRansomwareData EncryptedData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumActive

The Gill Corporation

bd_60cbe25923806691 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 19, 2024

To disclose

—

Affected

Not disclosed

Linked

6 records

Confidence

66%

Full breach record for The Gill Corporation →

The Gill Corporation experienced a cyber-attack in late June 2024, likely on June 23, 2024, where an unauthorized third party encrypted files and accessed/acquired personal information of former employees. Affected data includes names, Social Security Numbers, driver's license numbers, bank account numbers, and W-2 forms. The investigation is ongoing. The company has removed the exploited vulnerability, deployed additional security measures, and offered credit monitoring to affected former employees.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 23, 2024

Begins

Sep 19, 2024

Filed

This filing is one of 6 records about the same incident.View merged incident

A leak claim by hunters_international about this victim was first seen 52 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehunters_internationalbd_391db4844b89b4632024-07-29 · +51dCandidate

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_3b0d30f9d1670a8c2024-09-19Verified by operator
Vermont State AGbd_95d9dc0ebe1ad7302024-09-19Verified
Massachusetts State AGbd_decf30a95b7aa4522024-09-19Verified by operator
Indiana State AGbd_8efead134a7b03702024-09-16 · +3dVerified by operator

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com

Discovered: —
Breach occurred: Jun 23, 2024
Materiality determined: —
Notification sent: Sep 1, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Identified the vulnerability that was exploited by the third party and removed it from TGC’s systems
Deployed additional protective measures to secure TGC’s systems
Offering all former TGC employees a complimentary membership to Experian’s IdentityWorks service
Changes made: Examining additional protective measures to help prevent incidents of this kind in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 16 · first

Maine State AG+3d

Vermont State AG+3d

Massachusetts State AG+3d

California State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-592126
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: f3020b46264537bebeae65d6d06000d5b399d87a26c4dc0bb09c24028d564ab2

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Gill Corporation

Victim entityThe Gill Corporation

IncidentRansomware

Stated responseIdentified the vulnerability that was exploited by the third party and removed it from TGC’s systems

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov