Petco has confirmed that its knowledge safety breach uncovered delicate buyer info. 

The corporate initially acknowledged a breach with out detailing what was compromised, authorized notices that had been required in a number of states are beginning to present the scope of the hack.

In filings submitted to the Texas lawyer normal — echoed in notifications to officers in California, Massachusetts, and Montana — Petco disclosed that uncovered knowledge included clients’ names, Social Safety numbers, driver’s license numbers, dates of start, and monetary info equivalent to account and card numbers.

In two states, Petco reported solely a handful of affected residents, however California’s disclosure threshold (which solely kicks in when 500 clients or extra are affected) suggests the precise variety of victims there may be considerably larger.

As first spotted by TechCrunch, Petco declined to reply detailed questions on what number of clients had been impacted, whether or not any unauthorized events accessed or stole the uncovered recordsdata, or which software was liable for the problem.

The corporate has beforehand reported serving greater than 24 million clients in 2022, giving a way of the potential scale of the hack.

A pattern notification, printed by California’s lawyer normal, signifies the breach stemmed from a misconfigured setting in certainly one of Petco’s software program functions, which inadvertently made numerous recordsdata accessible on-line.

Petco says it has corrected the setting, eliminated the uncovered recordsdata, and applied extra safety measures.

The corporate is providing free credit score and id monitoring companies to affected people in states the place such help is required by legislation when extremely delicate knowledge — like SSNs or driver’s license numbers — is compromised.

Nonetheless to be decided: whether or not Texas residents will obtain the identical degree of safety.