🦬Montana State AG
Clustered 3 filings across 3 jurisdictions · filing window May 13, 2022 → May 17, 2022. View entity profile → Other incidents for this victim →
incident inc_7aa336b44085487c · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
ME MT NH
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Sep 7, 2021
When the intrusion reportedly occurred, per the linked filings
Dec 1, 2021
Reported by NEW HAMPSHIRE AG filing
Apr 13, 2022
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Gershman Investment Corp reported a data breach to the Montana Attorney General. The breach was reported on 2022-05-13. The breach occurred from 9/7/2021 to 9/22/2021. 8 Montana residents were affected.
Affected (this filing): 8
Gershman Investment Corp. reported an external system breach (hacking) occurring on 09/17/2021, discovered on 04/13/2022. The incident affected 52,737 individuals nationwide, including 5 Maine residents. Compromised data included names/personal identifiers combined with financial account or credit/debit card numbers. The company provided written notification and offered 12 months of identity theft protection and credit monitoring via Epiq.
Affected (this filing): 52,737
Gershman Investment Corp. notified the New Hampshire Attorney General of a September 2021 cyber incident affecting approximately two NH residents. Personal information (names, SSNs, driver's licenses, financial account numbers) was copied or viewed between Sept 7-22, 2021. Discovery occurred in late Dec 2021. Notifications were sent in May 2022. Response included law enforcement notification, system security measures, and one year of credit monitoring via Epiq/TransUnion.
Affected (this filing): 2