HackingHealthcareRetail & ConsumerHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIGovernment IDEmploymentMediumContained

Town and Country Animal Hospital

bd_52c5e7d17959f768 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 28, 2023

Filed

May 19, 2023

To disclose

7 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Town and Country Animal Hospital →

Davis Reeder Hall DVM (Town and Country Animal Hospital) notified the NH AG of a data security incident. On March 28, 2023, the company learned employees had fraudulent tax forms filed on their behalf. Investigation revealed an unauthorized actor accessed an employee account and acquired an administrative file containing employee PII. The company retained forensic experts, notified law enforcement, and offered 24 months of credit/identity monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 52 days

Mar 28, 2023

Discovered

May 19, 2023

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Town and Country Animal Hospital
norm: town and country animal hospital
Domain: townandcountryanimalh.com

Name: Town and Country Animal Hospital
norm: town and country animal hospital
Domain: townandcountryanimalh.com
Also named: Davis Reeder Hall DVM, PLCdba oflegal entity
Town and Country Animal Hospital & Columbia Pike Animal Hospital and Emergency Centerdba oftrade name
Industry: HealthcarellmRetail & Consumerllm

Discovered: Mar 28, 2023
Materiality determined: —
Notification sent: May 19, 2023
Affected individuals: Not disclosed
Data types: PIIGovernment IDEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Retained independent cybersecurity experts to conduct a forensic investigation
Reported this incident to federal law enforcement
Offering free credit and identity monitoring services
Implemented additional measures to reduce the risk of a similar incident occurring in the future
Changes made: Implemented additional measures to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/davis-reeder-hall-dvm-20230519.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2023
Raw hash: 6be05fedf9e5727b936be14ef423df194c26202a70a7b78e9648bd69ab956787

Reporting entityTown and Country Animal Hospital

Victim entityTown and Country Animal Hospital

Incidentdiscovered Mar 28, 2023

Stated responseRetained independent cybersecurity experts to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov