Petco confirms that a security flaw exposed customers’ personal data

Pet products and services giant Petco disclosed a data breach on Wednesday in a filing with the California Attorney General, which the company says involved its customers’ personal information.

State Posted a sample For the notification letter that Petco sends to customers affected by the breach. In the letter, Petco said it had identified “a setting in one of our software applications that inadvertently allowed access to certain files over the Internet,” adding that the company discovered the issue itself, and “immediately took steps to correct the issue and remove the files from further Internet access.”

However, the message does not specify what type of customer personal information was exposed during the vulnerability.

Petco spokesperson Ventura Olvera told TechCrunch that the company “provided more information to the individuals whose information was involved.”

Olvera did not respond to a series of follow-up questions, including the number of customers affected by the incident, and what type of personal data was disclosed.

California law requires companies to disclose data breaches involving 500 or more state residents, suggesting at least 500 Petco customers in California were affected. Petco has also been notified An unspecified number of people In Massachusetts, and three people in Montana, according to State website.

The company said it also offers free credit monitoring and identity theft services to victims. Under California law, businesses are required to provide resources to credit monitoring companies if a person’s driver’s license number or Social Security numbers are compromised.

Petco said in the letter that it “corrected the app settings after discovering the error,” and that it has implemented some “additional security measures and unspecified technical controls to enhance the security of our apps.”