Petco’s security lapse affected customers’ SSNs, drivers’ licenses and more 

Last week, favored products and services elephantine Petco confirmed that it experienced a information breach involving customers’ idiosyncratic information, without specifying what benignant of information was affected.

On Friday, successful a legally required filing with Texas’ lawyer general’s office, Petco reported that the affected information included: names, Social Security numbers, driver’s licence numbers, fiscal accusation specified arsenic relationship numbers, recognition oregon debit paper numbers, and dates of birth. 

Petco filed akin legally required notices successful California, Massachusetts, and Montana. In the second 2 states, Petco reported one and 3 affected residents respectively. 

The institution did not disclose the nonstop fig of victims successful California, wherever companies are required to disclose breaches involving astatine slightest 500 authorities residents, which suggests determination are much victims than that fig successful the state. 

Petco spokesperson Ventura Olvera did not respond to a bid of questions sent connected Monday, which included however galore customers successful full were affected by this incident. For context, successful 2022, Petco said it served much than 24 cardinal customers.

On Friday, Petco spokesperson Ventura Olvera said successful a connection to TechCrunch that the institution had “provided further accusation to individuals whose accusation was involved.” 

California’s lawyer wide published a illustration letter that Petco is sending to its customers. The connection said Petco discovered an contented with “a mounting wrong 1 of our bundle applications that inadvertently allowed definite files to beryllium accessible online,” that the institution “immediately took steps to close the contented and to region the files from further online access,” and that it “corrected” the mounting and implemented unspecified “additional information measures.” 

The institution is offering escaped recognition and individuality theft monitoring services to victims.