Social EngineeringRetail & ConsumerRetailPhishingBECMulti-Stage ChainTargetedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Health (basic)Financial accountMediumContained

Best Friends Pet Care

bd_5f1a1341e6f3dcd7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 8, 2021

Filed

Jul 1, 2021

To disclose

12 weeks

Affected

33state residents only

Confidence

66%

Full breach record for Best Friends Pet Care →3 incidents on file

Best Friends Pet Care, Inc. notified the NH Attorney General of a data breach resulting from a phishing email that compromised employee email accounts. Unauthorized access occurred between Nov 30, 2020, and Feb 5, 2021. The incident affected 33 New Hampshire residents, exposing SSNs, health info, and DOBs. Best Friends engaged forensic investigators, notified the FBI, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 129 days

discovery → filing · 12 weeks / 84 days

Nov 30, 2020

Begins

Apr 8, 2021

Discovered

Jul 1, 2021

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed33 affectedView incident

Name: MCGUIREWOODS LLP
norm: mcguirewoods

Name: Best Friends Pet Care
norm: best friends pet care
Domain: bestfriendspetcare.com
Industry: Retail & Consumerllm

Discovered: Apr 8, 2021
Breach occurred: Nov 30, 2020 – Feb 5, 2021
Undetected for: 129 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 30, 2021
Affected individuals: 33state-resident count only
Data types: Government IDIdentity (basic)Health (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI of the incidentNotified the Office of the Attorney General
Initial access: phishing_link

During the incident: Contained the incident
Commenced an investigation
Retained a forensic expert
Notified the FBI of the incident
Successfully locked out the unauthorized users from the Company’s system
Undertaking a full forensic investigation of the incident
Engaged a third-party vendor to identify contact information for impacted individuals
Offering each impacted New Hampshire resident a complimentary 12-month membership in Kroll’s Credit Monitoring, Web Watcher, Public Persona, Quick Cash Scan, $1 Million Identity Fraud Loss Reimbursement, Fraud Consultation, and Identity Theft Restoration services
Changes made: Secured the services of Kroll to provide identity monitoring at no cost to you for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/best-friends-pet-care-20210701.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2021
Raw hash: a41fbdf4f1ca4cee36dddc8341ad4dcf3ed32cb86cb4d4e3ce9370867961da63

Reporting entityMCGUIREWOODS LLP

Victim entityBest Friends Pet Care

Incidentdiscovered Apr 8, 2021

Stated responseContained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov