Petco’s vulnerability affected customers’ Social Security numbers, driver’s licenses, and more

Last week, pet products and services giant Petco announced She confirmed that she had suffered a data breach Includes personal information of customers, without specifying the type of data affected.

On Friday, in a legally required filing with the Texas Attorney General’s Office, Petco said the affected data included: names, Social Security numbers, driver’s license numbers, and financial information such as account numbers, credit or debit card numbers, and dates of birth.

Petco has provided similar notices that are legally required in California, Massachusettsand Montana. Petco reported that in the last two states one and three affected residents respectively.

The company did not reveal the exact number of victims in California, where companies are required to disclose violations that involved at least 500 state residents, indicating that there are more victims than this number in the state.

Petco spokesman Ventura Olvera did not respond to a series of questions sent Monday, which included the total number of customers affected by this incident. For context, in 2022, Petco He said It has served more than 24 million customers.

On Friday, Petco spokesperson Ventura Olvera said in a statement to TechCrunch that the company “provided more information to the individuals whose information was involved.”

California Attorney General Published a sample letter Which Petco sends to its customers. The letter said that Petco discovered an issue with “a setting within one of our software applications that inadvertently allowed access to certain online files,” that the company “immediately took steps to correct the issue and remove the files from further online access,” and that it “corrected” the setting and implemented unspecified “additional security measures.”

The company offers free credit monitoring and identity theft services to victims.