Retail
    Medium
    investigation open
    Updated 2 days ago

    Petco Data Breach

    Key takeaways

    • Reports suggest a potential breach involving Petco.
    • Discovered on September 16, 2026.
    • Possible data exposed: Government ID numbers, Driver's licenses, Name, Social Security Number, Financial Account Number, Credit Card Number, Debit Card Number, Date of Birth, Medical Information.
    • Affects individuals in: Massachusetts, Vermont.
    • Confirmation level: Confirmed by company.

    Breach confirmed

    The Petco breach is confirmed. If you may be affected, add your details below and we will take it from there.

    Detailed summary

    In September 2026, Petco Animal Supplies Stores, Inc. reported a data breach that exposed sensitive personal information. The company disclosed the incident to the Massachusetts Attorney General and the Vermont Attorney General on September 10, 2026. Consumers were reportedly notified on September 15, 2026.

    Confirmed data types exposed in the Vermont filing include government ID numbers and driver's licenses. Secondary reporting suggests names, Social Security numbers, financial account numbers, credit/debit card numbers, dates of birth, and possibly medical information were also involved. At least one Vermont resident was affected, but a broader company-wide total has not been publicly confirmed. The breach was described as an internal exposure due to a misconfigured software application setting.

    Details regarding the full extent of affected individuals and specific data types across all potentially impacted individuals are still emerging. Notifications to consumers may be delayed as investigations continue.

    Data possibly involved

    • Government ID numbers
    • Driver's licenses
      Can be used for identity fraud
    • Name
    • Social Security Number
      Can be used to open fraudulent accounts and file false tax returns
    • Financial Account Number
    • Credit Card Number
      May result in unauthorized charges on your accounts
    • Debit Card Number
      May result in unauthorized charges on your accounts
    • Date of Birth
      Often used in combination with other data for identity theft
    • Medical Information

    Company Response Timeline

    Response Grade
    A

    Notified consumers within 30 days of discovery

    Breach Occurred

    Sep 10, 2026

    Company Discovered

    Sep 10, 2026

    Regulator Notified

    Sep 10, 2026

    Consumers Notified

    Sep 15, 2026

    0 days to discover
    5 days to notify consumers

    Breach Verification Status

    Reports Only

    Complete

    Initial dark web reports of potential breach

    Company Confirmed

    Current

    Company has acknowledged the breach

    Regulator Confirmed

    Confirmed by regulatory authorities

    Note: Breach verification can take time. Information may evolve as more details become available from companies and regulators.

    Case Status:
    Investigation Open

    We're actively investigating this case and seeking affected individuals.

    Were you affected? Submit your information below.

    Were You Affected By This Breach?

    If you are a customer or have received a data breach notification, you may submit your information as part of our ongoing investigation. Submitting your information is free and does not obligate you.

    Were you in the Petco breach? Check your email

    Free scan against known breach datasets. Then remove your info from data-broker sites with Data Shield.

    No signup required. 30-second scan. Your email is only stored if you opt into alerts.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Check Your Risk Level

    Answer a few questions to understand how this breach might affect you

    What should I do?

    Change your passwords

    Update passwords for the affected service and any accounts using the same password

    Enable two-factor authentication

    Add an extra layer of security to your accounts

    Monitor your accounts

    Watch for suspicious activity on your financial and online accounts

    Watch for phishing attempts

    Be cautious of emails or messages claiming to be from the affected company

    Consider a credit freeze

    Prevent unauthorized access to your credit report

    Scan your email for other exposures

    Check whether this address shows up in other known breaches. Free, no account.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Got a notice about this breach?

    Paste it into BreachBrief to see exactly what data was exposed, how serious it is, and what to do next.

    Protect yourself

    Share This Breach Alert

    Help friends and family who might be affected by sharing this breach information

    Are you a law firm investigating this breach?

    Get qualified claimant leads delivered directly to your CRM.

    Related breaches

    Stay informed about breaches like this one

    We'll notify you when new data breaches are reported. Free, no spam. Unsubscribe anytime.

    Free, no spam. Unsubscribe anytime.