MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICLowContained
Crossroads Trading Co., Inc.
bd_8680c7a67346983a · schema v1 · pii pii-v1
Full breach record for Crossroads Trading Co., Inc. →On February 15, 2025, Crossroads Trading Co., Inc. experienced a ransomware incident where an unauthorized third party gained access to its server and encrypted data. The company secured its network, retained forensic investigators, and engaged a cyberthreat firm. Customer data, including names and other personal information, was involved. The company is offering two years of identity protection services through Experian and has reported the incident to the FBI.
Leak gap clock⏱ Leak >30d5 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_44202e6cb75889c7Leak Siteqilinfiled 2025-02-21(32d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_630daf08ddfcdf2bMaine State AGfiled 2025-03-25Verified
- bd_9903b9cec62fd77fVermont State AGfiled 2025-03-25Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-600342
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- ec25e0f1fa787f1612cd4cf573582a0ee255aed22543476aaa777a2d3ec00ccb
Reporting entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
Victim entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
Incident
- Discovered
- Feb 15, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Reported this incident to and met with the FBI
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.