HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Town and Country Animal Hospital
bd_52c5e7d17959f768 · schema v1 · pii pii-v1
Full breach record for Town and Country Animal Hospital →Davis Reeder Hall DVM (Town and Country Animal Hospital) notified the NH AG of a data security incident. On March 28, 2023, the company learned employees had fraudulent tax forms filed on their behalf. Investigation revealed an unauthorized actor accessed an employee account and acquired an administrative file containing employee PII. The company retained forensic experts, notified law enforcement, and offered 24 months of credit/identity monitoring via Experian.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/davis-reeder-hall-dvm-20230519.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2023
- Raw hash
- 6be05fedf9e5727b936be14ef423df194c26202a70a7b78e9648bd69ab956787
Reporting entity
- Name
- Town and Country Animal Hospitalnorm: town and country animal hospital
- Domain
- townandcountryanimalh.com
Victim entity
- Name
- Town and Country Animal Hospitalnorm: town and country animal hospital
- Domain
- townandcountryanimalh.com
Incident
- Discovered
- Mar 28, 2023
- Materiality determined
- —
- Notification sent
- May 19, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.