Petco has confirmed that its data security breach exposed sensitive customer information.

The company initially acknowledged a breach without detailing what was compromised, legal notices that were required in several states are starting to show the scope of the hack.

In filings submitted to the Texas attorney general — echoed in notifications to officials in California, Massachusetts, and Montana — Petco disclosed that exposed data included customers’ names, Social Security numbers, driver’s license numbers, dates of birth, and financial information such as account and card numbers.

In two states, Petco reported only a handful of affected residents, but California’s disclosure threshold (which only kicks in when 500 customers or more are affected) suggests the actual number of victims

See Full Page