MalwareFinancial ServicesFinanceRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PIIMediumContained

Crossroads Equipment Lease & Finance, LLC

bd_c00cbc9e0bd76d10 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2023

Filed

Feb 23, 2024

To disclose

47 weeks

Affected

13state residents only

Linked

8 filings

Confidence

65%

Full breach record for Crossroads Equipment Lease & Finance, LLC →

Crossroads Equipment Lease & Finance, LLC disclosed a ransomware attack on April 1, 2023, which encrypted systems and disrupted ACH payments. The company discovered the incident on April 2, 2023, and notified the FBI on April 5, 2023. Personal information potentially compromised included names, SSNs, driver's licenses, financial account numbers, and medical information. Notices were sent on February 23, 2024, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 47 weeks / 327 days

Apr 1, 2023

Begins

Apr 2, 2023

Discovered

Feb 23, 2024

Filed

vs. sector median

+38 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_0ad92da3eea5bc492024-02-23Verified
California State AGbd_1ea0de9dca288ec82024-02-23Verified
Indiana State AGbd_2a188244340d60002024-02-23Verified
Maine State AGbd_7db02c07009879582024-02-23Candidate

Show 3 more filings ↓up to 102d gap

Massachusetts State AGbd_a76fdee1a35866bd2024-02-23Verified
Vermont State AGbd_cebd1151800de2a62024-02-23Verified
California State AGbd_2ecc67df1c6bd8252024-06-04 · +102dVerified

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance
Industry: Financial Servicesllm

Discovered: Apr 2, 2023
Breach occurred: Apr 1, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2024
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Secured access to its systems
Began migrating all data to a cloud server with enhanced security
Implemented additional technical and organizational controls
Notified the Federal Bureau of Investigation
Changes made: Enhanced security around access to our system requiring a second form of user verification (MFA)
More complex user-restricted access
Redundant backup of the data
Continuous monitoring to protect against further incidents
Offering two years of 1-bureau free credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(327 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

New Hampshire State AGFeb 23 · first

California State AGFeb 23 · first

Indiana State AGFeb 23 · first

Maine State AGFeb 23 · first

Massachusetts State AGFeb 23 · first

Vermont State AGFeb 23 · first

Montana State AGFeb 23 · first · this page

California State AG+102d

Pattern: first filing Feb 23 (NH), last Jun 4 (CA) — a 102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2024
Raw hash: dec89538c83c661b489d67769c1f556caa52cd109412150c50ec6cca2c925171

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCrossroads Equipment Lease & Finance, LLC

Victim entityCrossroads Equipment Lease & Finance, LLC

Incidentdiscovered Apr 2, 2023

Stated responseSecured access to its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov