The Maine Office of the Attorney General disclosed that Valley Vet Supply suffered an external system breach (hacking) between February 4, 2024, and March 4, 2024, compromising the data of 25,969 individuals. The breach exposed financial account numbers and credit/debit card information, raising risks of identity theft and financial fraud. While the incident was detected on March 28, 2024, affected individuals were notified nearly a month later, on April 23, 2024. As a remedial measure, the company offered 12 months of identity theft protection services to impacted customers. The breach highlights vulnerabilities in the company’s cybersecurity defenses, particularly in safeguarding payment-related data, which could lead to reputational damage and financial losses for both the business and its customers.
TPRM report: https://www.rankiteo.com/company/valley-vet-supply
"id": "val437082125",
"linkid": "valley-vet-supply",
"type": "Cyber Attack",
"date": "2/2024",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 25969,
'industry': 'Veterinary Supply / E-commerce',
'name': 'Valley Vet Supply',
'type': 'Business'}],
'customer_advisories': 'Identity theft protection services offered for 12 '
'months',
'data_breach': {'number_of_records_exposed': 25969,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['financial account numbers',
'credit/debit card information']},
'date_detected': '2024-03-28',
'date_publicly_disclosed': '2024-04-23',
'description': 'The Maine Office of the Attorney General reported that Valley '
'Vet Supply experienced an external system breach (hacking) '
'affecting 25,969 individuals. The breach involved financial '
'account numbers and credit/debit card information. Identity '
'theft protection services were offered for 12 months to '
'affected individuals.',
'impact': {'data_compromised': ['financial account numbers',
'credit/debit card information'],
'identity_theft_risk': 'High (identity theft protection services '
'offered for 12 months)',
'payment_information_risk': 'High (credit/debit card information '
'compromised)'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Notification sent to affected '
'individuals (2024-04-23)'},
'title': 'Valley Vet Supply External System Breach',
'type': 'Data Breach (Hacking)'}