MalwareOtherRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Crossroads Trading Co., Inc.

bd_638e747090bb3c46 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 15, 2025

Filed

Apr 23, 2026

To disclose

—

Affected

185state residents only

Linked

13 filings

Confidence

66%

Full breach record for Crossroads Trading Co., Inc. →

Crossroads Trading Co., Inc. experienced a ransomware incident on February 15, 2025, where an unauthorized third party gained access to its server and encrypted data. The incident affected 185 Maryland residents, exposing names, Social Security numbers, and driver's license or state ID numbers. The company contained the breach, restored systems, and engaged forensic investigators. No evidence of data misuse was found. Residents were notified on March 25, 2025, and offered two years of identity theft protection.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

Feb 15, 2025

Begins

Feb 15, 2025

Discovered

Apr 23, 2026

Filed

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_1f73f152d85ddc0f2025-04-01 · +387dVerified
Montana State AGbd_4fbca7fbfafbb4342025-03-25 · +394dCandidate
Maine State AGbd_630daf08ddfcdf2b2025-03-25 · +394dVerified
Massachusetts State AGbd_78ec4bcb30006bdf2025-03-25 · +394dVerified by operator

Show 6 more filings ↓up to 394d gap

California State AGbd_8680c7a67346983a2025-03-25 · +394dVerified
Oregon State AGbd_8df3d41e3a5b18032025-03-25 · +394dVerified
Vermont State AGbd_9903b9cec62fd77f2025-03-25 · +394dVerified
New Hampshire State AGbd_df93c63fabff12292025-03-25 · +394dVerified
Indiana State AGbd_e43b19b7cc87dc6b2025-03-25 · +394dVerified
Nebraska State AGbd_e7115a7a8f4bf5382025-03-25 · +394dVerified

Showing first 10 of 12 linked disclosures.

Name: Crossroads Trading Co., Inc.
norm: crossroads trading
Domain: crossroadstrading.com

Name: Crossroads Trading Co., Inc.
norm: crossroads trading
Domain: crossroadstrading.com
Industry: Otherllm

Discovered: Feb 15, 2025
Breach occurred: Feb 15, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 185state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Contacted the Federal Bureau of Investigation regarding this incidentCooperated in their investigation

During the incident: Swiftly secured our network
Restored systems
Prevented further access by the third-party
Retained a team of expert forensic investigators
Performed a comprehensive investigation
Retained a cyberthreat firm
Took affirmative steps to prevent the encrypted data from being published, distributed, or misused
Notified its employees by email of this incident on February 26, 2025
Notified all potentially impacted Maryland residents on March 25, 2025
Offered them two years identity theft protection services, paid for by Crossroads
Contacted the Federal Bureau of Investigation regarding this incident
Cooperated in their investigation
Changes made: Taken steps to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Montana State AGMar 25 · first

Maine State AGMar 25 · first

Massachusetts State AGMar 25 · first

California State AGMar 25 · first

Oregon State AGMar 25 · first

Vermont State AGMar 25 · first

New Hampshire State AGMar 25 · first

Indiana State AGMar 25 · first

Nebraska State AGMar 25 · first

Illinois State AG+7d

Maryland State AG+394d · this page

Pattern: first filing Mar 25 (MT), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376759.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 452ab7429dc8ebae5659dda544842b0153048ce27c52fe2415943bcdbf718a7a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityCrossroads Trading Co., Inc.

Victim entityCrossroads Trading Co., Inc.

Incidentdiscovered Feb 15, 2025

Stated responseSwiftly secured our network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov