Crossroads Equipment Lease & Finance, LLC Data Breach

What Happened?

On April 1, 2023, Crossroads Equipment Lease & Finance, LLC experienced a cybersecurity incident involving a ransomware attack. This attack encrypted the company's computer systems, severely impacting their ability to access many digital files. This disruption affected critical business functions including the completion of ACH payments. It was not until January 25, 2024, that the company fully understood the nature and scope of the personal information that may have been compromised.

Information Involved

The data potentially accessed during this incident includes a wide range of personal and sensitive information:

• Personal identification details such as names, mailing addresses, phone numbers, and email addresses.
• Sensitive data including Social Security numbers, dates of birth, driver’s license numbers, passport numbers, and other government IDs.
• Financial information like tax documents, credit or debit card numbers, bankruptcy filings, financial statements, and account numbers along with associated security codes.
• Other details such as vehicle information, loan applications, medical information, and digital signatures.

Immediate Actions Taken

Upon discovering the attack on April 2, 2023, Crossroads quickly secured access to its systems and began migrating all data to a cloud server with enhanced security measures. By April 5, 2023, the company had also notified the Federal Bureau of Investigation. Since then, Crossroads has implemented additional security controls including multi-factor authentication and continuous monitoring to safeguard against future attacks.

How to Protect Yourself

If you believe you might be affected by this breach, it is crucial to stay vigilant. Regularly review your account statements and monitor your credit reports. You can obtain free credit reports from the three nationwide credit reporting agencies:

• Equifax
• Experian
• TransUnion

Additionally, consider placing a fraud alert and a security freeze on your credit reports. These steps can help prevent identity thieves from opening new accounts in your name.

Free Credit Monitoring

Crossroads is offering affected customers two years of free credit monitoring through Experian. This service includes identity theft insurance and identity restoration services. To enroll, visit Experian IdentityWorks and use the provided activation code. This offer is valid until May 31, 2024.

Further Assistance

For more detailed advice on protecting your personal information and to learn more about your rights under the Fair Credit Reporting Act, visit the Consumer Financial Protection Bureau.

If you suspect identity theft or need further assistance, you can also contact the Federal Trade Commission at www.consumer.gov/idtheft.

Contact Information

For any additional questions or concerns, you may reach out directly to Crossroads Equipment Lease & Finance, LLC at their corporate office or through the designated customer care number provided in their official communication.

For more details on this breach, you can view the full disclosure on the California Attorney General's website.

By taking the appropriate steps and utilizing the resources available, you can help secure your information from further risk and address any issues arising from this data breach.