Petco said the exposure was due to an error in an application and that it is notifying victims whose data was affected.