MalwareRansomwareData EncryptedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Crossroads Trading Co., Inc.
bd_df93c63fabff1229 · schema v1 · pii pii-v1
Full breach record for Crossroads Trading Co., Inc. →Crossroads Trading Co., Inc. reported a ransomware incident on March 25, 2025, affecting 32 New Hampshire residents. On February 15, 2025, an unauthorized third party gained access to the company's server and encrypted data. The company secured the network, engaged forensic investigators and a cyberthreat firm, and notified the FBI. Personal information of NH residents was encrypted. Identity theft protection services were offered to affected individuals.
Leak gap clock⏱ Leak >30d5 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 32 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4fbca7fbfafbb434Montana State AGfiled 2025-03-25Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/crossroads-trading-20250325.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- c5c28f6d2c15564be34594a0fa98a31e85b542cf3ae6c9895ebd24c2f8c83562
Reporting entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
Victim entity
- Name
- Crossroads Trading Co., Inc.norm: crossroads trading
- Domain
- crossroadstrading.com
Incident
- Discovered
- Feb 15, 2025
- Materiality determined
- —
- Notification sent
- Mar 25, 2025
- Affected individuals
- 32
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Contacted the Federal Bureau of Investigation regarding this incident and cooperated in their investigation
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.