MalwareFinancial ServicesFinanceRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)MediumContained

Crossroads Equipment Lease & Finance, LLC

bd_cebd1151800de2a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2023

Filed

Feb 23, 2024

To disclose

47 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

67%

Full breach record for Crossroads Equipment Lease & Finance, LLC →

Crossroads Equipment Lease & Finance, LLC notified customers of a ransomware attack on April 1, 2023, which encrypted systems and potentially exposed personal information including SSNs, DOBs, driver's licenses, and financial data. The company engaged the FBI, secured systems, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday47 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 47 weeks / 327 days

Apr 1, 2023

Begins

Apr 2, 2023

Discovered

Feb 23, 2024

Filed

vs. sector median

+38 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_0ad92da3eea5bc492024-02-23Verified
California State AGbd_1ea0de9dca288ec82024-02-23Verified
Indiana State AGbd_2a188244340d60002024-02-23Verified
Maine State AGbd_7db02c07009879582024-02-23Candidate

Show 3 more filings ↓up to 102d gap

Massachusetts State AGbd_a76fdee1a35866bd2024-02-23Verified
Montana State AGbd_c00cbc9e0bd76d102024-02-23Verified
California State AGbd_2ecc67df1c6bd8252024-06-04 · +102dVerified

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance

Name: Crossroads Equipment Lease & Finance, LLC
norm: crossroads equipment lease finance
Industry: Financial Servicesllm

Discovered: Apr 2, 2023
Breach occurred: Apr 1, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Feb 23, 2024
Notification sent: Feb 23, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Secured access to its systems
Began migrating all data to a cloud server with enhanced security
Implemented additional technical and organizational controls
Notified the Federal Bureau of Investigation
Offering two years of 1-bureau free credit monitoring through Experian
Changes made: Enhanced security around access to our system requiring a second form of user verification (MFA)
More complex user-restricted access
Redundant backup of the data
Continuous monitoring to protect against further incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(327 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

New Hampshire State AGFeb 23 · first

California State AGFeb 23 · first

Indiana State AGFeb 23 · first

Maine State AGFeb 23 · first

Massachusetts State AGFeb 23 · first

Montana State AGFeb 23 · first

Vermont State AGFeb 23 · first · this page

California State AG+102d

Pattern: first filing Feb 23 (NH), last Jun 4 (CA) — a 102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-02-23-crossroads-equipment-lease-finance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2024
Raw hash: 3bf4d9d4d65f5aaedfc524942c722bd1915f31441fc154b71678e36e69caa660

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityCrossroads Equipment Lease & Finance, LLC

Victim entityCrossroads Equipment Lease & Finance, LLC

Incidentdiscovered Apr 2, 2023

Stated responseSecured access to its systems

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov