HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsGovernment IDMediumResolved

United Veterinary Care

bd_90a0c6e6646a848a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 23, 2022

Filed

Nov 3, 2022

To disclose

11 days

Affected · nationwide

4653 in this filing

Linked

3 filings

Confidence

65%

Full breach record for United Veterinary Care →

United Veterinary Care experienced an external system breach that occurred between January 25, 2022, and March 11, 2022. The breach was discovered on October 23, 2022, and affected 465 individuals. Compromised information included names and financial account details, such as credit/debit card numbers with their security codes. For some individuals, Social Security numbers were also impacted. The company began notifying affected individuals on November 4, 2022, and offered 12 months of complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 23, 2022 → Filed with AG Nov 3, 202211d ✓ ME AG ≤30d11 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 271 days

discovery → filing · 11 days

Jan 25, 2022

Begins

Oct 23, 2022

Discovered

Nov 3, 2022

Filed

vs. sector median

9 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_a9f4083723902de92022-11-03Verified
Indiana State AGbd_668ec76c41cab0252022-11-04 · +1dVerified

Name: United Veterinary Care
norm: united veterinary care

Name: United Veterinary Care
norm: united veterinary care
Industry: Healthcarellm

Discovered: Oct 23, 2022
Breach occurred: Jan 25, 2022 – Mar 11, 2022
Undetected for: 271 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 4, 2022
Affected individuals: 465state + nationwide
Data types: Identity (basic)Financial accountFinancial credentialsGovernment ID
Data elements: Financial account numberSocial Security number
Attack vector: Unauthorized Access

During the incident: Notified affected consumers in writing.
Offered identity theft protection services.
Changes made: 12 Months complimentary credit monitoring if SSN impacted
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: ME AG ≤30d · 11d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 23, 2022
→ Filed with AG: Nov 3, 2022
11d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 23, 2022 → Filed with AG: Nov 3, 2022	11d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 3 · first

Maine State AGNov 3 · first · this page

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2a1e6205-4114-4d0e-999a-1ac94adeafb7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 3, 2022
Raw hash: 716c50cee3f1fd7867d55461f406f31d4bcaa8799ab5e348314bb0a9be8393e2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityUnited Veterinary Care

Victim entityUnited Veterinary Care

Incidentdiscovered Oct 23, 2022

Stated responseNotified affected consumers in writing.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov