Petco Lawsuit: The Data Breach Case, and Why There Is No Settlement Yet
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The Petco lawsuit in the news is a data breach class action. In late 2025 Petco told customers that a software setting had left files with names, Social Security numbers, driver’s license numbers and card numbers accessible online. The lead case, Mack v. Petco, has been pending in San Diego federal court since December 29, 2025. As of October 2026 there is no Petco settlement for this breach, no claim form and no deadline.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Data Breach Lawsuits Say Happened
According to Petco’s own words, quoted in the complaint, the company found “a setting within one of our software applications that inadvertently allowed certain files to be accessible online” on or about July 2025, during a routine security review. Petco says it removed the files and corrected the setting.
In a filing with the Texas attorney general on December 5, 2025, Petco listed the data involved: names, Social Security numbers, driver’s license numbers, financial account numbers, credit or debit card numbers and dates of birth.
The lawsuit alleges that Petco failed to protect that data and waited too long to say so: the named plaintiff says his letter arrived only in mid-December 2025. The complaint pleads negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, unjust enrichment and a claim under the Declaratory Judgment Act. Petco has not admitted wrongdoing.
Case Details
The lead case is Mack v. Petco Animal Supplies Stores, Inc., No. 3:25-cv-03806, filed December 29, 2025 in the U.S. District Court for the Southern District of California, before Judge Marilyn L. Huff (Magistrate Judge Barbara L. Major). Public docket on CourtListener.
A second breach suit, Viviani v. Petco Animal Supplies Stores, Inc., No. 3:26-cv-01279, was filed February 27, 2026 before Judge William Q. Hayes. A notice of voluntary dismissal was filed in it on May 15, 2026.
A third suit against the same Petco entity, Memery v. Petco Animal Supplies Stores, Inc., No. 3:26-cv-00823, filed February 10, 2026, is also before Judge Huff. Its docket shows a stay filing on May 4, 2026 and an order on a motion to stay on May 11, 2026. The public docket summary does not show what that case is about, so we do not count it as a breach case.
Status: Pending, No Settlement, No Claim Form
Petco did not disclose how many people were affected. The state filings show notices in Texas, California, Massachusetts and Montana. California requires a public filing only when at least 500 residents are involved, so the California count is at least that high.
If anyone tells you there is a “Petco settlement” for the 2025 breach that is paying now, they are wrong as of this date. The older Petco settlements described below are closed.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is in the Proposed Class
The Mack complaint asks to represent a nationwide class of people whose personal information was compromised in the Petco data breach. No class has been certified.
The practical test is your mail. Petco sent notice letters to the people whose information was involved, starting in December 2025. If you got one, keep it: it says which data was in the exposed files, and it is your best proof of membership if a settlement ever comes.
Being a Petco shopper alone does not mean you were affected. Petco said in 2022 that it served more than 24 million customers; the breach involved a much smaller set of files. You do not need to sign up anywhere. If a settlement is reached, the administrator contacts class members directly.
Is There Any Money?
For context only, not a prediction: Petco has settled a data breach case before. In the PupBox case (Fesler v. Petco, No. 3:20-cv-02474), the proposed deal reported in August 2021 offered up to $225 for ordinary expenses and up to $2,500 for extraordinary expenses, with documentation. That case closed on October 15, 2021.
What you can use today is the free credit and identity theft monitoring Petco offered to affected people in California, Massachusetts and Montana. Your notice letter explains how to enroll. Our data breach settlement calculator shows what breach settlements of this kind have paid.
How cases like this one end
Our copy of the federal courts’ own case database covers 25,309 other fraud casesclosed in U.S. federal district courts between 2015 and 2026, 27.6% of them filed as class actions:
- 17.1% ended in a settlement recorded by the court. Another 22.9% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 17.1% and 39.9%.
- 10.2% were decided on a motion before any trial.
- 1 in 112 reached a trial (0.9%), after a median of 29.9 months.
- Median time from filing to the end of the case: 7 months.
- Only 761 of them (3%) record a money award at all; the median of those is $663,000.
These are base rates for this type of case (federal other fraud cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Petco Lawsuit Timeline
- 1
July 2025 — Petco Finds the Exposed Files
Per Petco’s statement quoted in the complaint, a routine security review finds a software setting that left certain files accessible online. Petco removes the files.
- 2
December 5, 2025 — State Breach Filings
Petco files a breach report with the Texas attorney general listing Social Security, driver’s license and card numbers. Notices also go to California, Massachusetts and Montana.
- 3
December 29, 2025 — Mack v. Petco Filed
The first data breach class action, No. 3:25-cv-03806, is filed in the Southern District of California and assigned to Judge Marilyn L. Huff.
- 4
January 22, 2026 — Investor Suit Closed
A separate securities class action against Petco Health and Wellness Company (No. 3:25-cv-01667) closes after the lead plaintiff voluntarily dismisses it. It had nothing to do with the breach.
- 5
February–May 2026 — More Suits, One Dropped
Viviani (No. 3:26-cv-01279) is filed February 27, 2026 and voluntarily dismissed by notice on May 15, 2026. Memery (No. 3:26-cv-00823), filed February 10, is stayed by court order on May 11.
- 6
October 2026 — Still No Settlement
No settlement, fund, administrator, claim form or deadline appears in the records we could check, which run through May 2026.
Three Things to Watch For
A breach involving Social Security and card numbers, with no claim form yet, is an easy target for imposters:
“Claim your Petco settlement” sites
No claims portal exists for the 2025 breach. A page asking for your Social Security number or card number to “verify” you for a Petco payout is collecting the same data the breach exposed.
Fake Petco rewards or refund messages
Texts and emails that mention the breach and offer a gift card, Vital Care credit or refund for “affected customers” are not part of any court process. Log in through the Petco app or website yourself instead of clicking.
Old Petco settlements recycled as new
The PupBox breach deal (2021) and the background-check settlement (2018) are closed. Posts that present them as open, or ask a fee to “reopen” a payment, are false.
Petco Lawsuit — Questions People Actually Ask
Is there a Petco settlement or claim form for the data breach?
No. As of October 2026, the lead case (Mack v. Petco, No. 3:25-cv-03806) is open and no settlement has been announced. There is no fund, no administrator, no claim form and no deadline.
What data was exposed in the Petco breach?
Petco’s Texas filing of December 5, 2025 listed names, Social Security numbers, driver’s license numbers, financial account numbers, credit or debit card numbers and dates of birth. Your own notice letter says which items applied to you.
How do I know if I was affected?
Check for a notice letter from Petco, sent from December 2025 onward. Petco has not published a total count. Massachusetts and Montana filings showed one and three residents, and the California filing means at least 500 Californians were involved.
Can I still claim from an older Petco settlement?
No. The PupBox data breach case (Fesler v. Petco) closed on October 15, 2021. The background-check settlement, Feist v. Petco, received final approval on November 16, 2018 from Judge Huff: a $1,200,000 fund for people Petco screened between May 1, 2014 and December 31, 2015, about $20 each for 37,279 class members. Both are over.
What about the Petco shareholder lawsuit?
An investor suit, Spurbeck v. Petco Health and Wellness Company, Inc. (No. 3:25-cv-01667), was filed June 30, 2025 under the Securities Exchange Act. The lead plaintiff voluntarily dismissed it, and the case closed on January 22, 2026. No investor recovery came from it.
Did Petco change their name?
In court filings the public parent company appears as Petco Health and Wellness Company, Inc., and the store company that runs the shops appears as Petco Animal Supplies Stores, Inc., which does business as “Petco.” The breach suits name the store company.
Where to complain about Petco?
This page cannot help with a store, grooming or vet complaint; those go to Petco customer service. If your concern is the data breach, use the contact details in your notice letter. Petco filed its breach notices with the attorneys general of Texas, California, Massachusetts and Montana, and those offices take consumer complaints.
What should I do right now?
Enroll in the free monitoring if your letter offers it, freeze your credit at all three bureaus (free and reversible), and watch card and bank statements. Keep the letter. See open class action settlements for cases that are actually paying.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Data Breach Settlement Calculator
What breach settlements with Social Security numbers have paid
Open Class Action Settlements
Settlements currently accepting claims, with deadlines
Settlement Payout Calculator
Estimate a per-person share from a fund and claim rate
700Credit Data Breach Settlement
Another breach exposing Social Security numbers