CrossCheck Data Breach Details
According to filings with the Vermont Attorney General, an unauthorized actor gained access to CrossCheck’s merchant portal between May 18 and May 20, 2024. During this time, certain confidential data was exposed. The company launched a comprehensive review to identify the specific information affected and the individuals impacted. By September 25, 2024, CrossCheck had completed its review of compromised files and began working with AutoNation to obtain address details for those affected. This process concluded on February 19, 2025.
On March 4, 2025, CrossCheck began notifying impacted individuals, outlining the nature of the breach and offering assistance. The compromised dataset included names and other sensitive details, though the full extent of the breach has yet to be fully disclosed. As part of its response, CrossCheck has reported the breach to federal law enforcement, enhanced its cybersecurity policies, and is providing affected individuals with complimentary credit monitoring services.
What Information Was Compromised?
The compromised data may include:
- Names
- Dates of birth
- Social Security numbers
- Financial Information