PHP Vulnerability Responses by Company

Petco Animal Supplies Stores, Inc.

Companies / web services
Aliases / services
Petco / PetPass / Petco Animal Supplies Stores, Inc.
Official website
https://www.petco.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Petco application file-exposure incident

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The regulator record dates this incident to July 7, 2025. Petco reported that an application setting unintentionally made certain files accessible online, discovered during a routine review. It corrected the setting, removed access and introduced additional controls.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check your individual notice for the information involved and monitor account statements and credit reports. Report suspected identity misuse to the financial institution or relevant authorities; check the notice for any support eligibility and deadline.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-615037Service and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/Petco%20PetPass_CA%20App%20%26%20Sample_0.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Petco Animal Supplies Stores, Inc. and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments