Petco Animal Supplies Stores Data Security Investigation

Recently, Petco reported to the Attorney General of Montana that it had experienced a data security incident in which sensitive personal identifiable information in its care may have been compromised. According to the breach notice, Petco identified a setting within one of its software applications that inadvertently allowed certain files to be accessible online.¹ As a result, Petco launched an investigation to determine the nature of the incident.

Through its investigation, Petco confirmed that sensitive personal information in its systems may have been accessible online to an unauthorized third party during the incident. As a result, Petco began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:⁵

• Name
• Social Security number
• Driver’s license number
• Financial information (account number, credit or debit card number)
• Date of birth

As a result of the incident, Petco began mailing data security incident notification letters to impacted individuals. Based on the incident notice sent to Montana residents, Petco is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the notification letters that Petco filed with the Attorney General of Montana is below.