MalwareOtherRansomwareData EncryptedPIIIdentity (basic)LowContained

GIS Holdings LLC

bd_d64cb99e9072da7b · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 1, 2021

Filed

Dec 1, 2021

To disclose

9 weeks

Affected

2state residents only

Confidence

66%

Full breach record for GIS Holdings LLC →2 incidents on file

GIS Holdings LLC notified Montana residents of a cybersecurity incident discovered on October 1, 2021. The incident involved malware infection and unauthorized access to files containing personal information (names). The company engaged third-party forensic specialists, offered credit monitoring via TransUnion, and is conducting workforce training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 61 days

Oct 1, 2021

Discovered

Dec 1, 2021

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: GIS Holdings LLC
norm: gis holdings

Name: GIS Holdings LLC
norm: gis holdings
Industry: Otherllm

Discovered: Oct 1, 2021
Materiality determined: —
Notification sent: Nov 2, 2021
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: notify applicable regulatory authorities, as required by law

During the incident: Launched an investigation, with the assistance of third-party computer forensic specialists
Commenced an investigation with the assistance of third-party cyber security specialists
Confirming the security of our systems
Reviewing the contents of relevant data for sensitive information
Notifying impacted individuals associated with that sensitive information
Offering complimentary access to credit monitoring services through TransUnion
Changes made: Reviewing our policies, procedures, and processes related to the storage and access of personal information
Additional workforce training is being conducted to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 1, 2021
Raw hash: 1b85d88846cdc18557e647e6ef607362654a6e9f6a154f15163dac6effcddfe2

Reporting entityGIS Holdings LLC

Victim entityGIS Holdings LLC

Incidentdiscovered Oct 1, 2021

Stated responseLaunched an investigation, with the assistance of third-party computer forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov