MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)EmploymentIP / systemMediumContained

Crossroads Equipment Lease & Finance, LLC

bd_2ecc67df1c6bd825 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2023

Filed

Jun 4, 2024

To disclose

14 months

Affected

Not disclosed

Linked

8 filings

Confidence

64%

Full breach record for Crossroads Equipment Lease & Finance, LLC →

Crossroads Equipment Lease & Finance, LLC experienced a ransomware attack on April 1, 2023, which encrypted its computer systems. The company became aware of the incident on April 2, 2023. Personal information potentially compromised includes names, addresses, SSNs, financial account details, and medical information. The company secured systems, migrated to a cloud server, implemented MFA, and notified the FBI. Credit monitoring is offered to affected customers.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 2, 2023 → Notified Jun 3, 2024428d ✗ CA 60-day late14 months discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 14 months / 429 days

Apr 1, 2023

Begins

Apr 2, 2023

Discovered

Jun 4, 2024

Filed

vs. sector median

+53 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_0ad92da3eea5bc492024-02-23 · +102dVerified
California State AGbd_1ea0de9dca288ec82024-02-23 · +102dVerified
Indiana State AGbd_2a188244340d60002024-02-23 · +102dVerified
Maine State AGbd_7db02c07009879582024-02-23 · +102dCandidate

Show 3 more filings ↓up to 102d gap

Massachusetts State AGbd_a76fdee1a35866bd2024-02-23 · +102dVerified
Montana State AGbd_c00cbc9e0bd76d102024-02-23 · +102dVerified
Vermont State AGbd_cebd1151800de2a62024-02-23 · +102dVerified

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance
Industry: Financial Servicesllm

Discovered: Apr 2, 2023
Breach occurred: Apr 1, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 3, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)EmploymentIP / system
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Secured access to its systems
Began migrating all data to a cloud server with enhanced security
Implemented additional technical, and organizational controls
Notified the Federal Bureau of Investigation
Offering two years of 1-bureau free credit monitoring through Experian
Changes made: Implemented enhanced security around access to our system requiring a second form of user verification (MFA)
Implemented more complex user-restricted access
Implemented redundant backup of the data
Implemented continuous monitoring to protect against further incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(429 days from discovery to filing)
Compliance flags: CA 60-day late · 428d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 2, 2023
→ Notified: Jun 3, 2024
428d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 2, 2023 → Notified: Jun 3, 2024	428d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

New Hampshire State AGFeb 23 · first

California State AGFeb 23 · first

Indiana State AGFeb 23 · first

Maine State AGFeb 23 · first

Massachusetts State AGFeb 23 · first

Montana State AGFeb 23 · first

Vermont State AGFeb 23 · first

California State AG+102d · this page

Pattern: first filing Feb 23 (NH), last Jun 4 (CA) — a 102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-586359
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2024
Raw hash: 217f758f31cf16ab00b767a2fef17557b3803444a3b64bf2f90e2cf6e0974b40

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCrossroads Equipment Lease & Finance, LLC

Victim entityCrossroads Equipment Lease & Finance, LLC

Incidentdiscovered Apr 2, 2023

Stated responseSecured access to its systems

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov