377,000 Impacted by Data Breach at Texas Gas Station Firm - SecurityWeek

A filing with the Maine Attorney General’s Office, which requires organizations to disclose the number of individuals impacted by cybersecurity incidents, revealed that a company operating gas stations in Texas has suffered a data breach affecting more than 377,000 individuals. The disclosure was made by Gulshan Management Services, Inc., apparently associated with Gulshan Enterprises, which manages roughly 150 Handi Plus and Handi Stop gas stations and convenience stores in Texas. According to the filing with the Maine AGO, Gulshan detected unauthorized access to its IT systems in late September.  An investigation showed that the attacker had access to the company’s systems for 10 days before being detected, gaining entry following a successful phishing attack. Before it was expelled from Gulshan’s network, the threat actor stole personal data and deployed ransomware that encrypted files on the company’s systems. The probe found that personal information such as names, contact details, SSNs, and driver’s license numbers was compromised. No known ransomware group has publicly claimed responsibility for the attack on Gulshan. While the absence of a leak site posting can sometimes suggest a ransom has been paid, Gulshan’s disclosure that it restored systems using “known-safe backups” typically indicates the company chose to rebuild rather than negotiate a payment. Related: Dozens of Major Data Breaches Linked to Single Threat Actor Related: NordVPN Denies Breach After Hacker Leaks Data Related: Brightspeed Investigating Cyberattack WRITTEN BY Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. More from Eduard Kovacs Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch UK Companies House Exposed Details of Millions of Firms  Google, Meta, Microsoft Among Signatories of Pact to Combat Scams Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact Hacking Attempt Reported at Poland’s Nuclear Research Center Loblaw Data Breach Impacts Customer Information Starbucks Data Breach Impacts Employees Latest News The Collapse of Predictive Security in the Age of Machine-Speed Attacks Autonomous Offensive Security Firm XBOW Raises $120M at $1B+ Valuation Cloud Security Startup Native Exits Stealth With $42 Million in Funding ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors Virtual Summit Today: Supply Chain & Third-Party Risk Summit EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations Shadow AI Risk: How SaaS Apps Are Quietly Enabling Massive Breaches Manifold Raises $8 Million for AI Detection and Response Trending Webinar: Securing Fragile OT In An Exposed World March 10, 2026 Get a candid look at the current OT threat landscape as we move past "doom and gloom" to discuss the mechanics of modern OT exposure. Register Webinar: Why Automated Pentesting Alone Is Not Enough April 7, 2026 Join our live diagnostic session to expose hidden coverage gaps and shift from flawed tool-level evaluations to a comprehensive, program-level validation discipline. Register People on the Move Nudge Security has appointed Patrick Dillon as Chief Revenue Officer. Arctic Wolf has named Will May as its Chief Revenue Officer. Palo Alto Networks has named Danielle Gonzalez as its new Chief People Officer. More People On The Move Expert Insights The Human IOC: Why Security Professionals Struggle With Social Vetting Applying SOC-level rigor to the rumors, politics, and 'human intel' can make or break a security team. (Joshua Goldfarb) How To 10x Your Vulnerability Management Program In The Agentic Era The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation. (Nadir Izrael) SIM Swaps Expose A Critical Flaw In Identity Security SIM swap attacks exploit misplaced trust in phone numbers and human processes to bypass authentication controls and seize high-value accounts. (Torsten George) Four Risks Boards Cannot Treat As Background Noise The goal isn’t about preventing every attack but about keeping the business running when attacks succeed. (Steve Durbin) How To Eliminate The Technical Debt Of Insecure AI-Assisted Software Development Developers must view AI as a collaborator to be closely monitored, rather than an autonomous entity to be unleashed. Without such a mindset, crippling tech debt is inevitable. (Matias Madou) Flipboard Reddit Whatsapp Email