Petco confirms security lapse exposed customers’ personal data

[ad_1] Pet services and products large Petco disclosed a knowledge breach on Wednesday in a submitting with California’s legal professional common, which the corporate says includes the private data of its clients.

The state printed a pattern of the notification letter that Petco is sending to clients affected by the breach. Within the letter, Petco mentioned that it recognized “a setting inside one among our software program functions that inadvertently allowed sure recordsdata to be accessible on-line,” including that the corporate found the difficulty by itself, and “instantly took steps to right the difficulty and to take away the recordsdata from additional on-line entry.”

The letter, nonetheless, doesn't specify what kind of consumers’ private data was uncovered in the course of the safety lapse.

Petco spokesperson Ventura Olvera advised TechCrunch that the corporate had “offered additional data to people whose data was concerned.”

Olvera didn't reply to a sequence of follow-up questions, together with what number of clients have been affected by the incident, and what kind of private knowledge was uncovered.

California regulation requires that corporations disclose knowledge breaches involving 500 or extra state residents, suggesting a minimum of 500 Petco clients in California are affected. Petco has additionally notified an unspecified variety of folks in Massachusetts, and three folks within the state of Montana, based on the state’s web site.

The corporate mentioned additionally it is providing free credit score and identification theft monitoring companies to the victims. Below California regulation, corporations are required to offer assets to credit score monitoring companies if an individual’s driver’s license quantity or Social Safety numbers are compromised.

Techcrunch occasion

San Francisco | October 13-15, 2026

Within the letter, Petco mentioned it “corrected the applying’s settings after discovering the error,” and that it has carried out some unspecified “further safety measures and technical controls to reinforce the safety of our functions.”