AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Petco Animal Supplies Stores, Inc. (“Petco”)
bd_5686b24494d2a92f · schema v1 · pii pii-v1
Full breach record for Petco Animal Supplies Stores, Inc. (“Petco”) →Petco Animal Supplies Stores, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting six NH residents. A software application setting inadvertently made files containing names, DOBs, SSNs, and driver's license numbers accessible online. Discovered via routine security review on Nov 3, 2025, Petco corrected the setting, removed access, and mailed notifications on Dec 3, 2025, offering one year of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_580cea81c65bc409Indiana State AGfiled 2025-12-03Verified
- bd_2d6982ffe39429a6Texas State AGfiled 2025-12-05(2d gap)Verified
- bd_660fdb406d0cf33aMontana State AGfiled 2025-10-22(42d gap)Candidate
- bd_6b4f7498ef0ff715Indiana State AGfiled 2025-10-22(42d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/petco-animal-supplies-stores-20251203.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 3, 2025
- Raw hash
- 11189270f9c1659b16b531668521c868711c69f0f946b74b41b15fdd4abfcbb9
Reporting entity
- Name
- Petco Animal Supplies Stores, Inc. (“Petco”)norm: petco animal supplies stores inc petco
Victim entity
- Name
- Petco Animal Supplies Stores, Inc. (“Petco”)norm: petco animal supplies stores inc petco
Incident
- Discovered
- Nov 3, 2025
- Materiality determined
- —
- Notification sent
- Dec 3, 2025
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1535 Unauthorized Access to Cloud Storage
- Regulator citations
- Notified New Hampshire Attorney General John Formella
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.