AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
GSPlatformCo Inc
bd_e571e074be5ee942 · schema v1 · pii pii-v1
Full breach record for GSPlatformCo Inc →GSPlatformCo Inc. reported a data breach to the New Hampshire Attorney General involving a misconfigured Elasticsearch index on DigitalOcean. The incident, discovered on November 22, 2025, exposed basic customer profile information (names, emails, addresses) for approximately 66 New Hampshire residents. The data was an unencrypted snapshot from April 2025. GSPlatformCo contained the breach by isolating the environment, removing the data from indexing, and migrating to a secure Hetzner infrastructure with enhanced controls.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_4ed66e6c4f37d2ebCalifornia State AGfiled 2026-01-12Verified
- bd_9fb38cf7fb093047Washington State AGfiled 2026-01-12Verified
- bd_ae32ca57c4e89aefMaine State AGfiled 2026-01-12Verified
- bd_731ce90868a6c3cfIndiana State AGfiled 2026-01-11(1d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 19d gap
- bd_50c0e0a87c4629eaOregon State AGfiled 2026-01-31(19d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gsplatformco-20260112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2026
- Raw hash
- 9262abf3a4b33ad8ea6cd237a1975fbccd2454dfc40081f1ec270d8f7a5a9894
Reporting entity
- Name
- GSPlatformCo Incnorm: gsplatformco
- Domain
- anka.africa
Victim entity
- Name
- GSPlatformCo Incnorm: gsplatformco
- Domain
- anka.africa
Incident
- Discovered
- Nov 22, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 66
- Data types
- IDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.