HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Great Companions
bd_1d87705d273f2b70 · schema v1 · pii pii-v1
Full breach record for Great Companions →Great Companions, a subsidiary of Revival Animal Health, notified consumers of a data breach involving its third-party e-commerce provider, CommerceV3. Between Nov 2021 and Dec 2022, an unauthorized actor accessed CommerceV3 systems, potentially exposing customer names, billing addresses, and full payment card details (including CVV). Great Companions investigated, confirmed the scope, and offered 12 months of credit/identity monitoring. No Great Companions systems were directly compromised.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1b88822ab2703118New Hampshire State AGfiled 2023-10-19Verified
- bd_4afd523d84b6156aMaine State AGfiled 2023-10-19Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-10-19-great-companions-commercev3-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 19, 2023
- Raw hash
- b8e98646188a8e919542094f27f503a070620f965d9d3bf3e63565fc9d26a853
Reporting entity
- Name
- Revival Animal Healthnorm: revival animal health
Victim entity
- Name
- Great Companionsnorm: great companions
Incident
- Discovered
- Aug 23, 2023
- Materiality determined
- —
- Notification sent
- Oct 19, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via CommerceV3
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.