GILMAN HILL ASSET MANAGEMENT, LLC

Gilman Hill Asset Management, LLC notified consumers of a data breach involving unauthorized access to its internal systems via a vulnerability in CrushFTP software. The incident occurred between March 29 and April 1, 2025, and was discovered on April 4, 2025. Affected data included names and variable personal information. Gilman Hill engaged forensic investigators, contained the breach, and ceased using the vulnerable software. Affected individuals were offered two years of credit monitoring.

Gilman Hill Asset Management, LLC notified the NH AG of a cybersecurity event affecting 9 NH residents. Unauthorized access occurred March 29-April 1, 2025, via an exploit in CrushFTP software. The firm discovered the vulnerability on April 4, 2025, and confirmed data exposure (names, SSNs, driver's licenses, financial account numbers) on May 19, 2025. Notifications were mailed June 6, 2025, offering credit monitoring.

Affected (this filing): 9