MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)EmploymentMediumContained

Crossroads Equipment Lease & Finance, LLC

bd_1ea0de9dca288ec8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2023

Filed

Feb 23, 2024

To disclose

47 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

64%

Full breach record for Crossroads Equipment Lease & Finance, LLC →

Crossroads Equipment Lease & Finance, LLC experienced a ransomware attack on April 1, 2023, which encrypted computer systems and disrupted business functions. The company became aware of the incident on April 2, 2023. Personal information potentially compromised includes names, addresses, SSNs, government IDs, financial account details, and medical information. The company secured systems, migrated data to a cloud server, implemented MFA, and notified the FBI. Two years of credit monitoring are offered to affected customers.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 2, 2023 → Notified Feb 23, 2024327d ✗ CA 60-day late47 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 47 weeks / 327 days

Apr 1, 2023

Begins

Apr 2, 2023

Discovered

Feb 23, 2024

Filed

vs. sector median

+38 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_0ad92da3eea5bc492024-02-23Verified
Indiana State AGbd_2a188244340d60002024-02-23Verified
Maine State AGbd_7db02c07009879582024-02-23Candidate
Massachusetts State AGbd_a76fdee1a35866bd2024-02-23Verified

Show 3 more filings ↓up to 102d gap

Montana State AGbd_c00cbc9e0bd76d102024-02-23Verified
Vermont State AGbd_cebd1151800de2a62024-02-23Verified
California State AGbd_2ecc67df1c6bd8252024-06-04 · +102dVerified

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance
Industry: Financial Servicesllm

Discovered: Apr 2, 2023
Breach occurred: Apr 1, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)Employment
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Secured access to its systems
Began migrating all data to a cloud server with enhanced security
Implemented additional technical, and organizational controls
Notified the Federal Bureau of Investigation
Changes made: Implemented enhanced security around access to our system requiring a second form of user verification (MFA)
Implemented more complex user-restricted access
Implemented redundant backup of the data
Implemented continuous monitoring to protect against further incidents
Offering two years of 1-bureau free credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(327 days from discovery to filing)
Compliance flags: CA 60-day late · 327d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 2, 2023
→ Notified: Feb 23, 2024
327d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 2, 2023 → Notified: Feb 23, 2024	327d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

New Hampshire State AGFeb 23 · first

Indiana State AGFeb 23 · first

Maine State AGFeb 23 · first

Massachusetts State AGFeb 23 · first

Montana State AGFeb 23 · first

Vermont State AGFeb 23 · first

California State AGFeb 23 · first · this page

California State AG+102d

Pattern: first filing Feb 23 (NH), last Jun 4 (CA) — a 102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-581427
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2024
Raw hash: c2ec9d9da94025b3b98c91cc4494d91fda7e39f02cf915597bc00f5a2bda326d

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCrossroads Equipment Lease & Finance, LLC

Victim entityCrossroads Equipment Lease & Finance, LLC

Incidentdiscovered Apr 2, 2023

Stated responseSecured access to its systems

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov