Petco said the exposure was due to an error in an application, and that it is notifying victims’ whose data was affected.