PupBox
ent_d085a9ea3794ace65c8efed6
Disclosures
5
State AG · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
30,673
as filed · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- PupBox
- Normalized
- pupbox— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- pupbox.com
Disclosure history (5)newest first
- 🦫Oregon State AGas victim2020-10-02
PupBox, c/o Petco Animal Supplies Stores, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2020-10-02. The breach occurred during 2/11/2020 - 8/9/2020. The breach was discovered on 9/2/2020. 30,673 individuals were affected. Notice was sent on 10/2/2020.
- 🦬Montana State AGas victim2020-10-02
PupBox reported a data breach to the Montana Attorney General. The breach was reported on 2020-10-02. The breach occurred from 2/11/2020 to 8/9/2020. 102 Montana residents were affected.
- 🌲Washington State AGas victim2020-10-02
PupBox, a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2020-08-07 and filed notice on 2020-10-02. 1,046 Washington residents were affected. 56 days elapsed between awareness and notification. 163 days to identify the breach. 0 days to contain the breach.
- 🦞Maine State AGas victim2020-10-02
PupBox, a subsidiary of Petco, reported an external system breach that compromised the financial account numbers or credit/debit card numbers of its customers. The incident occurred on February 11, 2020, and was discovered on September 2, 2020, affecting 176 Maine residents.
- 🐻California State AGas victim2020-10-02
PupBox, a business unit of Petco, disclosed a data breach involving an unauthorized plugin on its website that captured and exfiltrated customer personal information, including names, addresses, credit card details (number, expiration, CVV), and passwords. The incident occurred between February 11, 2020, and August 9, 2020. PupBox engaged a cybersecurity firm to investigate and resolved the incident.