MalwareRetail & ConsumerRetailCapture Stored DataData EncryptedData Leak ThreatenedTargetedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Crossroads Trading Co., Inc.
bd_630daf08ddfcdf2b · schema v1 · pii pii-v1
Full breach record for Crossroads Trading Co., Inc. →On February 15, 2025, an unauthorized third party gained access to Crossroads Trading Co., Inc.'s server and encrypted data stored on the company network. The breach was discovered on March 7, 2025. The company engaged forensic investigators and a cyberthreat firm, restored systems, and cooperated with the FBI. 60,041 individuals were affected in total, including 27 Maine residents. Affected individuals were offered two years of Experian IdentityWorks identity protection services.
Leak gap clock⏱ Leak >30d18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 32 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_44202e6cb75889c7Leak Siteqilinfiled 2025-02-21(32d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_8680c7a67346983aCalifornia State AGfiled 2025-03-25Verified
- bd_9903b9cec62fd77fVermont State AGfiled 2025-03-25Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6a3ad897-f2c7-485b-a2aa-8b687d7dda10.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- d179a92f29ace5b6156542ee5a0fcc35dfac921e35e9da3055ea792d19577388
Reporting entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
- Industry
- Other Commercial
Victim entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Mar 7, 2025
- Materiality determined
- —
- Notification sent
- Mar 25, 2025
- Affected individuals
- 27
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported to Maine Attorney GeneralReported to and cooperated with the FBI
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 18d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 7, 2025→ Filed with AG: Mar 25, 202518d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.