Petco Faces Class Action Lawsuit Over Data Breach Exposing Customer Personal Information
A class action lawsuit filed in the U.S. District Court for the Southern District of California alleges that Petco failed to adequately protect customer data, leading to a breach that compromised sensitive personal information. The suit, Mack, et al. v. Petco Animal Supplies Stores Inc. (Case No. 3:25-cv-03806), was brought by plaintiff Matthew Mack, who claims the company neglected to implement proper cybersecurity measures despite knowing the risks.
The breach, discovered during a routine security review in July 2025, exposed a range of personally identifiable information (PII), including names, dates of birth, Social Security numbers, driver’s license numbers, and financial details such as account and payment card numbers. According to the lawsuit, affected customers were not notified of the incident for months, leaving them unaware of the exposure.
Mack’s legal team, represented by Lynch Carpenter LLP, accuses Petco of negligence, breach of implied contract, and unjust enrichment, among other claims. The plaintiff seeks declaratory and injunctive relief, as well as damages, on behalf of a nationwide class of consumers impacted by the breach.
The lawsuit highlights Petco’s alleged failure to meet basic security standards, despite handling highly sensitive customer data. The case underscores growing concerns over corporate accountability in safeguarding personal information amid rising cyber threats.
Petco cybersecurity rating report: https://www.rankiteo.com/company/petco-animal-supplies-inc-
"id": "PET1769153279",
"linkid": "petco-animal-supplies-inc-",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Nationwide class of consumers',
'industry': 'Pet Supplies',
'location': 'United States',
'name': 'Petco Animal Supplies Stores Inc.',
'type': 'Retailer'}],
'customer_advisories': 'Delayed notifications to affected customers',
'data_breach': {'personally_identifiable_information': ['Names',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s license '
'numbers',
'Payment card '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Financial details']},
'date_detected': '2025-07',
'description': 'A class action lawsuit alleges that Petco failed to '
'adequately protect customer data, leading to a breach that '
'compromised sensitive personal information, including names, '
'dates of birth, Social Security numbers, driver’s license '
'numbers, and financial details. The breach was discovered '
'during a routine security review in July 2025, and affected '
'customers were not notified for months.',
'impact': {'brand_reputation_impact': 'Growing concerns over corporate '
'accountability in safeguarding '
'personal information',
'data_compromised': 'Personally identifiable information (PII), '
'including names, dates of birth, Social '
'Security numbers, driver’s license numbers, '
'and financial details such as account and '
'payment card numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action lawsuit filed',
'payment_information_risk': 'High'},
'post_incident_analysis': {'root_causes': 'Failure to implement proper '
'cybersecurity measures despite '
'knowing the risks'},
'references': [{'source': 'Lynch Carpenter LLP'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit (*Mack, et '
'al. v. Petco Animal Supplies '
'Stores Inc.*, Case No. '
'3:25-cv-03806)'},
'response': {'communication_strategy': 'Delayed customer notifications'},
'title': 'Petco Data Breach Exposing Customer Personal Information',
'type': 'Data Breach'}