MalwareTechnologyInformationRansomwareData EncryptedData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumActive

The Gill Corporation

bd_95d9dc0ebe1ad730 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 19, 2024

To disclose

—

Affected

Not disclosed

Linked

6 records

Confidence

65%

Full breach record for The Gill Corporation →

The Gill Corporation experienced a cyber-attack in late June 2024, likely on June 23, where an unauthorized third party encrypted files and accessed personal information of former employees, including names, SSNs, driver's license numbers, and bank account numbers. The company has removed the exploited vulnerability and deployed additional security measures. Former employees are offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 23, 2024

Begins

Sep 19, 2024

Filed

This filing is one of 6 records about the same incident.View merged incident

A leak claim by hunters_international about this victim was first seen 52 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehunters_internationalbd_391db4844b89b4632024-07-29 · +51dCandidate

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_3b0d30f9d1670a8c2024-09-19Verified by operator
California State AGbd_60cbe259238066912024-09-19Candidate
Massachusetts State AGbd_decf30a95b7aa4522024-09-19Verified by operator
Indiana State AGbd_8efead134a7b03702024-09-16 · +3dVerified by operator

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com

Name: The Gill Corporation
norm: the gill
Domain: thegillcorp.com
Industry: Technologyllm

Discovered: —
Breach occurred: Jun 23, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Identified the vulnerability that was exploited by the third party and removed it from TGC’s systems
Deployed additional protective measures to secure TGC’s systems
Offering all former TGC employees a complimentary membership to Experian’s IdentityWorks service
Changes made: Deployed additional protective measures to secure TGC’s systems
Examining additional measures to help prevent incidents of this kind in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 16 · first

Maine State AG+3d

California State AG+3d

Massachusetts State AG+3d

Vermont State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-19-gill-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: 7ccc1a3e4fe753554103a078f9e39bf64a273eb23c21574899aabf0a99ee08fc

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Gill Corporation

Victim entityThe Gill Corporation

IncidentRansomware

Stated responseIdentified the vulnerability that was exploited by the third party and removed it from TGC’s systems

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov