"The customer records, seen by TechCrunch, included visit summaries, medical histories, and prescription and vaccination records, among other files relating to Vetco customers and their pets. The files also contained customer names; their home address, email address, and phone number; the location of the Vetco clinic where the services were performed; medical assessments, tests and diagnoses; and the costs of goods, names of veterinarians, consent forms, owner signatures, and dates of service."
"TechCrunch alerted Petco to the security lapse on Friday after discovering the vulnerability. The company acknowledged the data exposure days later on the following Tuesday after TechCrunch followed-up by attaching several exposed customer files to our email. Petco spokesperson Ventura Olvera told TechCrunch late on Tuesday that the company has "implemented, and will continue to implement, additional measures to further strengthen the security of our systems," though the company did not provide evidence for the claim."
A security lapse in Petco's Vetco Clinics website allowed anyone on the internet to download customer records without login credentials. Exposed records included visit summaries, medical histories, prescription and vaccination records, customer names, home addresses, emails, phone numbers, clinic locations, medical assessments, tests, diagnoses, costs, veterinarian names, consent forms, owner signatures, and dates of service. Animal details such as names, species, breed, sex, age, birthdate, microchip numbers, vitals, and prescriptions were also exposed. At least one record was indexed by Google. Petco acknowledged an investigation, removed part of the Vetco site, claimed to implement additional security measures, and declined to provide evidence or confirm logging capabilities.
Read at TechCrunch
Unable to calculate read time
Collection
[
|
...
]