Petco accidentally exposed customer and pet records via Vetco site — what to know and do

Petco confirmed a security lapse that left files from its Vetco clinics website accessible without login. The exposed data reportedly included customer names, dates of birth, driver’s license numbers, Social Security numbers, financial details and Vetco visit records such as medical histories, pet names and vaccination data.

The issue stemmed from an incorrect software setting that made a number of files publicly reachable. Petco has taken the affected portion of the Vetco site offline, removed the exposed files and implemented additional security measures. The company has not said whether it can determine if any of the data was actually downloaded during the exposure.

Which customers may be affected

• People who used Vetco clinics for pet care (vaccinations, medical visits) and provided identification.
• Anyone who provided sensitive identity or financial information to Petco/Vetco during visits.
• Customers who received a direct notice from Petco or saw a site banner about the incident.

Immediate steps to protect yourself

• Verify whether you received a notification from Petco and follow any instructions they provide.
• Monitor bank and card statements closely and report suspicious charges immediately.
• Check your credit reports and consider placing a fraud alert or freezing your credit with the major bureaus.
• If your Social Security number or driver’s license was exposed, consider identity monitoring and file alerts with relevant authorities.
• Contact Petco’s support to ask about eligibility for any offered credit monitoring — note Petco’s offer may be limited to certain states.

What Petco says and what’s unclear

Petco says it fixed the misconfiguration, removed the files and implemented security steps. However, the company hasn’t confirmed whether it can detect access to the exposed files or whether any data was exfiltrated. That uncertainty means customers should assume potential exposure and act cautiously.

Why this matters

Exposed personal data like SSNs and driver’s license numbers can fuel identity theft, tax fraud or account takeover. Medical and pet records add privacy concerns and may be used for targeted scams. With data breaches increasingly common, prompt action and monitoring are essential.

For further reading, see coverage from security and tech outlets and any official notices from Petco. If you think you were affected, contact Petco customer service and consider professional identity‑theft remediation.

Discussion: Did you receive a notice from Petco — and what steps have you taken to protect yourself after a data exposure? Share tips or questions below.