COVETRUS, INC.

Covetrus, Inc. reported a phishing incident occurring between November 11 and 28, 2022, discovered on March 21, 2023. The breach affected 120 individuals, including 4 Maine residents. Compromised data included names and financial account or credit/debit card numbers. Covetrus provided written notification on May 8, 2023, and offered 24 months of identity theft protection services via Kroll, LLC.

Covetrus, Inc. reported a security event where two employee email accounts were accessed by an unauthorized actor between November 11 and November 28, 2022. The actor likely used phishing to obtain credentials and redirected payments. Personal and financial information from the affected accounts was potentially downloaded. Covetrus engaged forensic experts, notified law enforcement, and is offering two years of complimentary identity monitoring.

Covetrus, Inc. notified Montana residents that two employee email accounts were compromised by an unauthorized actor between November 11 and November 28, 2022. The actor accessed personal information to redirect payments. Covetrus engaged forensic experts, notified law enforcement, and is offering two years of complimentary identity monitoring.