Petco confirms major data breach involving customer data

Petco disclosed a data breach that exposed sensitive customer information. The company revealed the details in state filings after identifying a setting in one of its software applications that made certain files accessible online. This issue has now been fixed, but the impact is significant.

Sign up to receive my FREE CyberGuy report
Get my best tech tips, urgent security alerts, and exclusive offers delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Guide to Surviving Scams, free when you join me CYBERGUY.COM fact sheet

THIRD-PARTY BREACH EXPOSES CHATGPT ACCOUNT DETAILS

What Petco says exposed the breach

According to reports filed with the Texas attorney general’s office, the exposed data included names, Social Security numbers, driver’s license numbers, financial account details, credit or debit card numbers, and dates of birth. Filings in California, Massachusetts and Montana confirm more residents are affected.

In California, companies must report violations involving at least 500 state residents. Petco did not disclose the exact figure, suggesting the actual total is higher. For context, Petco said in 2022 it served more than 24 million customers.

Petco says the company sent notifications to people whose information was involved. The sample notice posted by the California attorney general explains that a software setting allowed certain files to be accessible online. Petco says it removed those files, fixed the settings and added new security measures.

The company offers free credit and identity theft monitoring to victims in California, Massachusetts and Montana. It is unclear if similar support is being offered to affected Texas residents.

We reached out to Petco for comment and a representative provided CyberGuy with the following statement:

“We recently identified a setting in one of our applications that was inadvertently making certain Petco files accessible online. Upon identifying the issue, we took immediate action to correct the error and began an investigation. We notified the individuals whose information was involved and continue to monitor for additional issues. We take this incident seriously. To help prevent something like this from happening again, we have taken and will continue to take steps to improve the security of our network.”

What this violation means to you

A breach that exposes government IDs, financial figures and dates of birth creates long-term risks. Criminals use this combination of information to open accounts, take over existing accounts, or attempt to bypass identity checks. Even if no fraud occurs immediately, exposed data can remain in criminal markets for years.

Ways to stay safe after a breach like this

You can take several steps today that will help reduce your risk and protect your identity in the future.

1) Place a credit freeze

A freeze blocks new credit accounts in your name. It also prevents criminals from opening loans or credit cards with your stolen information. You can freeze your credit for free at Equifax, Experian, and TransUnion.

2) Add two more freezes

Two additional freezes cover accounts that do not go through the major credit bureaus. Freeze ChexSystems to prevent criminals from opening checking or savings accounts. Freeze NCTUE to block fake phone, cable or utility accounts.

3) Activate account alerts

Set alerts for bank accounts, credit cards, and online purchases. Alerts help you quickly detect suspicious activity.

4) Use a password manager

Strong passwords protect you from credential stuffing attacks. This happens when criminals take passwords stolen from a breach and test them on other sites. A password manager creates unique passwords for each account and helps you stop these attacks before they start.

Next, check to see if your email has been exposed in previous breaches. Our number one password manager (see Cyberguy.com) includes a built-in breach scanner that checks to see if your email address or passwords have appeared in known breaches. If you discover a match, immediately change any reused passwords and protect those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com

5) Control your identity

If Petco offered you free identity theft monitoring, sign up as soon as possible. Helps you detect fraud that may occur months or years later.

Identity theft companies can monitor personal information such as your social security number (SSN), phone number, and email address, and alert you if it is sold on the dark web or used to open an account. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best options on how to protect yourself from identity theft at Cyberguy.com

WHY YOUR HOLIDAY SHOPPING DATA NEEDS A CLEANUP NOW

6) Delete exposed personal data

Data broker sites collect and share personal data that fuels scams. Deleting your information reduces your exposure and makes you a harder target.

While no service can guarantee complete removal of your data from the Internet, a data deletion service is truly a smart choice. They are not cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically deleting your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to delete your personal data from the Internet. By limiting the information available, you reduce the risk of scammers cross-referencing leak data with information they can find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already available on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already available on the web: Cyberguy.com

WHY SCAMMERS OPEN BANK ACCOUNTS IN YOUR NAME

7) Be aware of phishing and use strong antivirus software

Scammers often follow up a violation with real-looking emails or text messages. Slow down and review each message before clicking. A powerful antivirus helps block malicious links and alerts you when something looks risky.

The best way to protect yourself from malicious links that install malware and potentially access your private information is to have powerful antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best antivirus protection winners of 2025 for your Windows, Mac, Android, and iOS devices at Cyberguy.com

CLICK HERE TO GET THE News APP

Kurt’s Key Takeaways

Data breaches happen frequently, but this one involves information that can cause lasting damage. You can protect yourself with a few quick steps that reduce the chances of fraud and limit how far criminals can go with your data.

How much trust do you place in companies to protect your personal information? Let us know by writing to us at Cyberguy.com

Sign up to receive my FREE CyberGuy report
Get my best tech tips, urgent security alerts, and exclusive offers delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Guide to Surviving Scams, free when you join me CYBERGUY.COM fact sheet

Copyright 2025 CyberGuy.com. All rights reserved.