The California Office of the Attorney General disclosed a **data breach** targeting **Sam's Club** in October 2020, stemming from an incident on **September 24, 2020**. Unauthorized actors gained access to member accounts using **stolen login credentials**, compromising **personal information** of affected individuals. While the exact scope of exposed data was not detailed, such breaches typically involve sensitive details like names, contact information, membership IDs, or payment data—posing risks of identity theft, phishing, or financial fraud. The breach underscored vulnerabilities in credential security, highlighting the need for stronger authentication measures. Sam’s Club likely faced reputational damage and potential regulatory scrutiny, though no evidence suggested systemic operational disruption or ransomware involvement. Customers were advised to monitor accounts and update passwords, but the long-term impact on trust and membership retention remained a concern.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-195405
TPRM report: https://www.rankiteo.com/company/sam's-club
"id": "sam025091825",
"linkid": "sam's-club",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Retail / Wholesale',
'location': 'United States (California)',
'name': "Sam's Club",
'type': 'Retail'}],
'attack_vector': 'Unauthorized Access (Stolen Credentials)',
'data_breach': {'personally_identifiable_information': 'Potential',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2020-09-24',
'date_publicly_disclosed': '2020-10-21',
'description': 'The California Office of the Attorney General reported a data '
"breach involving Sam's Club on October 21, 2020. The breach "
'occurred on September 24, 2020, due to unauthorized access to '
'accounts using stolen login credentials, potentially '
'affecting various personal information of members.',
'impact': {'data_compromised': ['Personal Information'],
'identity_theft_risk': 'Potential'},
'initial_access_broker': {'entry_point': 'Stolen Login Credentials'},
'post_incident_analysis': {'root_causes': ['Unauthorized Access via Stolen '
'Credentials']},
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'title': "Sam's Club Data Breach (2020)",
'type': 'Data Breach'}