HackingCustomer Data InvolvedLowResolved
Cross Financial Corp.
bd_4073494b40344a78 · schema v1 · pii pii-v1
Full breach record for Cross Financial Corp. →Cross Financial Corp. reported an external system breach that occurred on September 2, 2025, and was discovered on October 13, 2025. The incident affected 111 Maine residents, who were notified on November 12, 2025. The company offered 12 months of credit monitoring and identity protection services through Kroll.
Maine clockDiscovered Oct 13, 2025 → Filed with AG Nov 12, 202530d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed111 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/554bdca5-3684-4bc1-aae5-c5369a67e39a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 12, 2025
- Raw hash
- 1ef3c202d94abb6394701a9f414b529095a10d718fe5ab9919fe8684f4cbbfb2
Reporting entity
- Name
- Cross Financial Corp.norm: cross financial
Victim entity
- Name
- Cross Financial Corp.norm: cross financial
Incident
- Discovered
- Oct 13, 2025
- Materiality determined
- —
- Notification sent
- Nov 12, 2025
- Affected individuals
- 111
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 13, 2025→ Filed with AG: Nov 12, 202530d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.