Petco Animal Supplies Stores

Petco Animal Supplies Stores, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting one New Hampshire resident. Unauthorized access to a single employee's Microsoft 365 account resulted in the exposure of the resident's name and driver's license number. Petco contained the incident, engaged third-party cybersecurity professionals, and mailed a notification letter on September 10, 2026, offering two years of credit monitoring services.

Petco Animal Supplies Stores, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-09-10. The reporting organization type is Other Commercial. 1 Vermont residents were affected. Categories of data breached: Government ID Numbers.

Petco Animal Supplies Stores, Inc. notified Massachusetts residents of a security incident involving personal information. The company implemented additional security measures and is offering two years of complimentary credit and identity monitoring through Epiq. The specific nature of the breach, dates, and number of affected individuals were not disclosed in the provided notice.

Petco Animal Supplies Stores, Inc. (“Petco”) based in San Diego, California, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-11-03 and reported on 2025-12-05. 329 Texas residents were affected. 2,159 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Financial Information (e.g. account number, credit or debit card number);Date of Birth. Consumers were notified via U.S. Mail.

Petco Animal Supplies Stores, Inc. (“Petco” reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-04. 7 Massachusetts residents were affected.

Petco Animal Supplies Stores, Inc. reported a data breach to the California Attorney General involving a misconfiguration in one of its software applications that inadvertently allowed certain files containing personal information to be accessible online. The issue was discovered through a routine security review on July 7, 2025. Petco immediately corrected the settings and removed the files. Affected individuals were offered complimentary credit and identity monitoring.

Petco Animal Supplies Stores, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting six NH residents. A software application setting inadvertently made files containing names, DOBs, SSNs, and driver's license numbers accessible online. Discovered via routine security review on Nov 3, 2025, Petco corrected the setting, removed access, and mailed notifications on Dec 3, 2025, offering one year of credit monitoring.

Petco Animal Supplies Stores Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2019-01-01 and was reported on 2025-12-03. 4 Indiana residents were affected.

Petco Animal Supplies Stores, Inc. notified Montana residents of a security incident where a misconfigured software application setting inadvertently made files containing names and other personal information accessible online. Petco discovered the issue on September 22, 2025, corrected the settings immediately, and is offering one year of complimentary credit and identity monitoring through Epiq.

Petco Animal Supplies Stores Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-03 and was reported on 2025-10-22. 2 Indiana residents were affected.

Petco Animal Supplies Stores, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-01. 1 Massachusetts residents were affected.

PupBox, a business unit of Petco, disclosed a security incident involving an unauthorized plugin on its website that captured and exfiltrated customer data (names, emails, addresses, credit card numbers, CVVs, and passwords) between February 11 and August 9, 2020. The incident was discovered on September 2, 2020, affecting approximately 30,673 individuals nationwide, including 145 New Hampshire residents. PupBox shut down impacted systems, engaged cybersecurity experts, and resolved the incident.

A checkout function scraper plugin was installed on the Petco website and used to forward customer payment information to a third-party server. The compromised data included names and financial account numbers or credit/debit card numbers, along with their associated security codes, access codes, passwords, or PINs.