MalwareRansomwareData EncryptedRansom DemandedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained

Crossroads Trading Co., Inc.

bd_638e747090bb3c46 · schema v1 · pii pii-v1

Full breach record for Crossroads Trading Co., Inc. →

Crossroads Trading Co., Inc. reported a security incident to the Maryland Attorney General on March 25, 2025. On February 15, 2025, an unauthorized third party gained access to the company's server and encrypted data, constituting a ransomware attack. The incident affected 185 Maryland residents, whose names, Social Security numbers, and driver's license/ID numbers were encrypted. The company secured the network, restored systems, engaged forensic and cyberthreat firms, and notified the FBI. Residents were notified on March 25, 2025, and offered two years of identity theft protection services.

Leak gap clock✗ Leak >180d14 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed185 affectedView incident

A leak claim by qilin about this victim predates this filing by 426 days.View originating leak claim

Source provenance

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376759.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 452ab7429dc8ebae5659dda544842b0153048ce27c52fe2415943bcdbf718a7a

Reporting entity

Name: Crossroads Trading Co., Inc.
norm: crossroads trading
Domain: crossroadstrading.com

Victim entity

Name: Crossroads Trading Co., Inc.
norm: crossroads trading
Domain: crossroadstrading.com

Incident

Discovered: Feb 15, 2025
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 185
Data types: IDENTITY_GOVERNMENTIDENTITY_BASIC
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: contacted the Federal Bureau of Investigationcooperated in their investigation

Compliance

Time to disclose: 14 months(432 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.