Clustered 4 filings across 4 jurisdictions · filing window Feb 21, 2025 → Mar 25, 2025. View entity profile → Other incidents for this victim →
incident inc_d6ac244b3827400e · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
PII
CA ME VT
Leak Site · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Feb 15, 2025
When the intrusion reportedly occurred, per the linked filings
Feb 15, 2025
Reported by CALIFORNIA AG, VERMONT AG filings
All data of this company will be available for download on 27.02.2025. One of the first companies to pioneer secondhand clothing as an alternative to traditional retail, Crossroads Trading has been buying, selling, and consigning name brand a ...
Mar 7, 2025
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
On February 15, 2025, an unauthorized third party gained access to Crossroads Trading Co., Inc.'s server and encrypted data stored on the company network. The breach was discovered on March 7, 2025. The company engaged forensic investigators and a cyberthreat firm, restored systems, and cooperated with the FBI. 60,041 individuals were affected in total, including 27 Maine residents. Affected individuals were offered two years of Experian IdentityWorks identity protection services.
Affected (this filing): 27
On February 15, 2025, Crossroads Trading Co., Inc. experienced a ransomware incident where an unauthorized third party gained access to its server and encrypted data. The company secured its network, retained forensic investigators, and engaged a cyberthreat firm. Customer data, including names and other personal information, was involved. The company is offering two years of identity protection services through Experian and has reported the incident to the FBI.
Crossroads Trading Co., Inc. notified consumers of a February 15, 2025 security incident where an unauthorized third party encrypted data on its network. The incident involved the encryption of data containing names and other categories of personal information. Crossroads engaged forensic investigators and the FBI, secured the network, and is offering two years of Experian identity protection services to affected individuals.