Gulshan Management Services this week confirmed it notified 377,082 people about a September 2025 data breach that compromised names, Social Security numbers, credit and debit card numbers, driver’s license numbers, and contact info.
Gulshan operates about 150 gas stations, mostly in Texas.
Gulshan’s notice to victims says a successful phishing attack allowed unauthorized access to its systems. No ransomware gang has publicly taken credit for the breach at time of writing.
“On the weekend of September 27, 2025, GMS discovered that an unauthorized third party had gained access to its information systems,” says Gulshan’s notice to victims.
“Subsequent investigation determined this unauthorized access came from a successful phishing attack on September 17, 2025. The third party was able to access servers that hosted personal data and deploy malicious software that encrypted portions of GMS’s network.”
Gulshan is offering free identity monitoring to eligible victims.
The company now faces several class-action lawsuits in response to the breach.
Comparitech attempted to contact Gulshan for comment and will update this article if the company replies.
Ransomware attacks on US tech
Comparitech researchers have logged 325 confirmed ransomware attacks on US businesses in 2025 to date. Those attacks compromised more than 25.9 million personal records.
This attack on Gulshan is the fifth-largest such breach of the year by number of records compromised. The top four include:
- Conduent notified 15.9 million people of a January 2025 data breach by SafePay
- Episource notified 5.4 million people of a June 2025 ransomware attack
- Marquis Software Solutions notified 1.4 million people of an August 2025 data breach claimed by PEAR
- Motility Software Solutions notified 766,760 people of an August 2025 ransomware attack
Ransomware attacks can both steal data and lock down computer systems. Businesses that refuse to pay ransoms can face extended downtime, permanent data loss, and putting customers and staff at increased risk of fraud.
About Gulshan Management Services
Also called Gulshan Enterprises, Gulshan Management Services is based in Sugar Land, Texas. It operates about 150 gas stations including the Handi Plus and Handi Stop brands.
