HackingTechnologyRetail & ConsumerInformationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

Galco Industrial Electronics, Inc.

bd_6815f9062090bc8c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 20, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Galco Industrial Electronics, Inc. →

Galco Industrial Electronics notified consumers in October 2025 that a malicious cyberattack on its third-party payment processor in August 2025 may have allowed an unauthorized actor to copy payment card details via malicious code on Galco's website. Affected data includes names, addresses, and payment card information. Galco removed the code, updated credentials, and engaged security professionals.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 1, 2025

Begins

Oct 20, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_634097ffaadb38d52025-10-20Verified

Name: Galco Industrial Electronics, Inc.
norm: galco industrial electronics

Name: Galco Industrial Electronics, Inc.
norm: galco industrial electronics
Industry: TechnologyllmRetail & Consumerllm

Discovered: —
Breach occurred: Aug 1, 2025 – Aug 31, 2025
Materiality determined: —
Notification sent: Oct 20, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Reported the matter to appropriate regulatory authorities
Third party: via third-party payment processor
Initial access: supply_chain

During the incident: Immediately began an investigation
Started taking steps to identify, contain, and remediate any unauthorized activity
Promptly removed the malicious code
Updated credentials
Engaged data security and privacy professionals to assist in our response
Worked with a leading privacy and security firm to aid in our investigation and response
Conducted a data review to determine the scope of Information potentially impacted
Reported the matter to appropriate regulatory authorities
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGOct 20 · first

Vermont State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-10-20-galco-industrial-electronics-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2025
Raw hash: 515c3d91745af21a9b6c3ec18ebce1cd6fe2871050eef0917ab3351c38f73773

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGalco Industrial Electronics, Inc.

Victim entityGalco Industrial Electronics, Inc.

IncidentThird-Party / Supply Chain

Stated responseImmediately began an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov