HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Petco Animal Supplies Stores

bd_9c3f05e47c434873 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Sep 10, 2026

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

69%

Full breach record for Petco Animal Supplies Stores →6 incidents on file

Petco Animal Supplies Stores, Inc. notified the NH Attorney General of unauthorized access to a single employee's Microsoft 365 account. The incident exposed the name and driver's license number of one New Hampshire resident. Petco contained the activity, engaged third-party cybersecurity professionals, and mailed notification letters on September 10, 2026. Two years of credit monitoring via Epiq were offered.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 10, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_c9b9d498130a388f2026-09-10Candidate

Name: Petco Animal Supplies Stores, Inc.
norm: petco animal supplies stores

Name: Petco Animal Supplies Stores
norm: petco animal supplies stores
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: Sep 10, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Immediately took steps to contain the activity
Launched an investigation with the assistance of third-party cybersecurity professionals
Conducted a review of the files
Mailed a notification letter via First-Class mail to the involved New Hampshire resident
Offering a complimentary, two-year membership to credit monitoring and identity protection services through Epiq
Established a dedicated, toll-free call center
Changes made: Implemented additional security measures and technical controls to enhance the security of its systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGSep 10 · first

New Hampshire State AGSep 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/petco-animal-supplies-stores-20260910.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2026
Raw hash: e28826de6bafa8dd4540a2d18819a2acccaebeb113b40a9cc6b298730a2c12e8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPetco Animal Supplies Stores, Inc.

Victim entityPetco Animal Supplies Stores

IncidentUnauthorized Access

Stated responseImmediately took steps to contain the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov