HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Durvet

bd_f7573fed98712627 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 17, 2025

Filed

Mar 17, 2026

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Durvet →2 incidents on file

Durvet, Inc. notified Nebraska AG of unauthorized access to its systems between Oct 17-18, 2025. Suspicious activity was detected on Oct 17, 2025. The incident involved the copying of names and Social Security numbers of one Nebraska resident. Notification was sent on March 17, 2026. Durvet engaged forensic specialists, secured the network, and provided 24 months of credit monitoring via Epiq.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

Incident timeline

Oct 17, 2025

Begins

Oct 17, 2025

Discovered

Mar 17, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 151 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_6f70144973a842002026-03-17Verified by operator
Massachusetts State AGbd_8ffb8f549a313fd02026-03-17Verified by operator
Indiana State AGbd_acb081d9810620562026-03-17Verified by operator

Name: Durvet
norm: durvet
Domain: durvet.com

Name: Durvet
norm: durvet
Domain: durvet.com
Industry: Technologyllm

Discovered: Oct 17, 2025
Breach occurred: Oct 17, 2025 – Oct 18, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 17, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: providing written notice of this incident to relevant regulators
Initial access: valid_credentials

During the incident: Took steps to secure the network
Initiated an investigation into the nature and scope of the event with the assistance of third-party computer forensic specialists
Conducted a comprehensive review of the information at risk
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for twenty-four (24) months through Epiq
Providing written notice of this incident to relevant regulators
Providing written notice... to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implement additional safeguards and review our policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 17 · first

Massachusetts State AGMar 17 · first

Indiana State AGMar 17 · first

Nebraska State AGMar 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/088c3f27-81b6-4d76-af35-1bdb397acae5.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2026
Raw hash: 70b14387b3a25ecf407a68a41ee7b42395c66058b36ae6d1fe4cbf558efefbff

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDurvet

Victim entityDurvet

Incidentdiscovered Oct 17, 2025

Stated responseTook steps to secure the network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov