Sam’s Club, a division of Walmart Inc., is investigating a possible cyberattack referenced by the Clop ransomware gang on a leak site. Despite Clop’s mention, there is no specific information made public suggesting exfiltration of company or customer data. With over $86 billion in net sales and about 600 warehouse clubs, Sam’s Club has not confirmed any cyber intrusion or security incidents. The threat is linked to zero-day vulnerabilities in MOVEit and Cleo file transfer software, exploited by Clop for data extortion, highlighting a shift from file encryption to data theft for monetization.
Source: https://www.cybersecuritydive.com/news/sams-club-clop-ransomware/744093/
TPRM report: https://scoringcyber.rankiteo.com/company/sams-club-map
"id": "sam417040325",
"linkid": "sams-club-map",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Retail',
'name': 'Sam’s Club',
'size': 'Large',
'type': 'Retail'}],
'attack_vector': 'Zero-day vulnerabilities in MOVEit and Cleo file transfer '
'software',
'description': 'Sam’s Club, a division of Walmart Inc., is investigating a '
'possible cyberattack referenced by the Clop ransomware gang '
'on a leak site. Despite Clop’s mention, there is no specific '
'information made public suggesting exfiltration of company or '
'customer data. With over $86 billion in net sales and about '
'600 warehouse clubs, Sam’s Club has not confirmed any cyber '
'intrusion or security incidents. The threat is linked to '
'zero-day vulnerabilities in MOVEit and Cleo file transfer '
'software, exploited by Clop for data extortion, highlighting '
'a shift from file encryption to data theft for monetization.',
'investigation_status': 'Ongoing',
'motivation': 'Data extortion',
'ransomware': {'ransomware_strain': 'Clop'},
'threat_actor': 'Clop ransomware gang',
'title': 'Sam’s Club Possible Cyberattack by Clop Ransomware Gang',
'type': 'Ransomware',
'vulnerability_exploited': ['MOVEit', 'Cleo file transfer software']}