Crossroads Equipment Lease & Finance, LLC Data Breach

Will Gendron
Editor in Chief
Published
March 1, 2024
Updated
June 28, 2024
Crossroads Equipment Lease & Finance, LLC Data Breach
Crossroads Equipment Lease & Finance, LLC
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

What Happened?

On April 1, 2023, Crossroads Equipment Lease & Finance, LLC experienced a cybersecurity incident involving a ransomware attack. This attack encrypted the company's computer systems, severely impacting their ability to access many digital files. This disruption affected critical business functions including the completion of ACH payments. It was not until January 25, 2024, that the company fully understood the nature and scope of the personal information that may have been compromised.

Information Involved

The data potentially accessed during this incident includes a wide range of personal and sensitive information:

  • Personal identification details such as names, mailing addresses, phone numbers, and email addresses.
  • Sensitive data including Social Security numbers, dates of birth, driver’s license numbers, passport numbers, and other government IDs.
  • Financial information like tax documents, credit or debit card numbers, bankruptcy filings, financial statements, and account numbers along with associated security codes.
  • Other details such as vehicle information, loan applications, medical information, and digital signatures.

Immediate Actions Taken

Upon discovering the attack on April 2, 2023, Crossroads quickly secured access to its systems and began migrating all data to a cloud server with enhanced security measures. By April 5, 2023, the company had also notified the Federal Bureau of Investigation. Since then, Crossroads has implemented additional security controls including multi-factor authentication and continuous monitoring to safeguard against future attacks.

How to Protect Yourself

If you believe you might be affected by this breach, it is crucial to stay vigilant. Regularly review your account statements and monitor your credit reports. You can obtain free credit reports from the three nationwide credit reporting agencies:

Additionally, consider placing a fraud alert and a security freeze on your credit reports. These steps can help prevent identity thieves from opening new accounts in your name.

Free Credit Monitoring

Crossroads is offering affected customers two years of free credit monitoring through Experian. This service includes identity theft insurance and identity restoration services. To enroll, visit Experian IdentityWorks and use the provided activation code. This offer is valid until May 31, 2024.

Further Assistance

For more detailed advice on protecting your personal information and to learn more about your rights under the Fair Credit Reporting Act, visit the Consumer Financial Protection Bureau.

If you suspect identity theft or need further assistance, you can also contact the Federal Trade Commission at www.consumer.gov/idtheft.

Contact Information

For any additional questions or concerns, you may reach out directly to Crossroads Equipment Lease & Finance, LLC at their corporate office or through the designated customer care number provided in their official communication.

For more details on this breach, you can view the full disclosure on the California Attorney General's website.

By taking the appropriate steps and utilizing the resources available, you can help secure your information from further risk and address any issues arising from this data breach.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
Date of Breach
April 1, 2023
Breach Discovered Date
Total People Affected
Information Types Exposed
- Name of individual - Address - Social Security Number Information - Driver’s License number - Government-issued ID number (e.g. passport, state ID card) - Financial Information (e.g. account number, credit or debit card number) - Medical Information - Other - Date of Birth - Mailing address - Phone numbers - Email address - Social Security number - 1099 Forms - Passport number, or other state or government IDs (including photocopies of such) - Vehicle information such as Vehicle Identification Number or License - Tax documents, including Tax Returns and Tax Forms and individual taxpayer identification number - Credit or Debit card numbers - Bankruptcy filings - Financial statements and financial account numbers plus a security code, access code, or password that may permit access to the account - Credit reports, including credit score and credit history - Loan applications - Digital signatures

Join the

Crossroads Equipment Lease & Finance, LLC

data breach lawsuit. It's free to join. 

Join the Lawsuit
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image