Covetrus, Inc.

The Massachusetts Attorney General's Office reported a data breach involving Covetrus, Inc. on an unspecified date. The breach occurred when two employee email accounts were accessed by an unauthorized actor between November 11, 2022, and November 28, 2022, potentially exposing personal information, though the specific types of information affected are not detailed. Covetrus is offering two years of complimentary identity monitoring services through Kroll.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b36d8a8-13c5-4fb7-982c-adac011283f1.shtml

TPRM report: https://www.rankiteo.com/company/covetrus

"id": "cov417072925",
"linkid": "covetrus",
"type": "Breach",
"date": "11/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'Covetrus, Inc.', 'type': 'Company'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'type_of_data_compromised': 'Personal Information'},
 'description': "The Massachusetts Attorney General's Office reported a data "
                'breach involving Covetrus, Inc. on an unspecified date. The '
                'breach occurred when two employee email accounts were '
                'accessed by an unauthorized actor between November 11, 2022 '
                'and November 28, 2022, potentially exposing personal '
                'information, though the specific types of information '
                'affected are not detailed. Covetrus is offering two years of '
                'complimentary identity monitoring services through Kroll.',
 'impact': {'data_compromised': 'Personal Information'},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'source': "Massachusetts Attorney General's Office"}],
 'response': {'third_party_assistance': 'Kroll'},
 'threat_actor': 'Unauthorized Actor',
 'title': 'Covetrus, Inc. Data Breach',
 'type': 'Data Breach'}