HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
GILMAN HILL ASSET MANAGEMENT, LLC
bd_dae19a1dd95cb7e2 · schema v1 · pii pii-v1
Full breach record for GILMAN HILL ASSET MANAGEMENT, LLC →Gilman Hill Asset Management, LLC notified the NH AG of a cybersecurity event affecting 9 NH residents. Unauthorized access occurred March 29-April 1, 2025, via an exploit in CrushFTP software. The firm discovered the vulnerability on April 4, 2025, and confirmed data exposure (names, SSNs, driver's licenses, financial account numbers) on May 19, 2025. Notifications were mailed June 6, 2025, offering credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cb7c8ab797267e02Vermont State AGfiled 2025-06-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gilman-hill-asset-management-20250606.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2025
- Raw hash
- 38ab88d0e3af06687df1f37f3979d94d238ef5f5af260fea7cb129314d693f19
Reporting entity
- Name
- GILMAN HILL ASSET MANAGEMENT, LLCnorm: gilman hill asset management
Victim entity
- Name
- GILMAN HILL ASSET MANAGEMENT, LLCnorm: gilman hill asset management
Incident
- Discovered
- Apr 4, 2025
- Materiality determined
- May 19, 2025
- Notification sent
- Jun 6, 2025
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.