DisclosureLens
MalwareProfessional ServicesProfessional ServicesPhishingRansomwareData EncryptedData ExfiltratedIdentity (basic)Government IDMediumContained

Gulshan Management Services

bd_803e9bb6b7a2af0a · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 27, 2025

Filed

Jan 5, 2026

To disclose

Affected

Not disclosed

Linked

10 filings

Confidence

66%
Full breach record for Gulshan Management Services

Gulshan Management Services, Inc. (GMS) disclosed a data breach in Nebraska discovered on September 27, 2025, resulting from a phishing attack on September 17, 2025. An unauthorized third party accessed systems, encrypted portions of the network with ransomware, and potentially accessed names, contact info, SSNs, and driver's license numbers. GMS contained the incident, rebuilt systems, reset credentials, engaged Kroll for 12 months of identity monitoring, and notified law enforcement.

Incident timeline

undetected · 10 days

Sep 17, 2025

Begins

Sep 27, 2025

Discovered

Jan 5, 2026

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filingsup to 70d gap

Filing propagation · 10 filings · 10 states

View merged incident ↗

Pattern: first filing Jan 1 (IL), last Mar 16 (TX) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.