Company Details
sam's-club
45,215
381,258
43
samsclub.com
1271
SAM_1414288
Completed

Sam's Club Company CyberSecurity Posture
samsclub.comSam’s Club (NYSE: WMT) a division of Walmart Inc., is the membership warehouse club solution for everyday living. Our President and CEO is Chris Nicholas and our headquarters is in Bentonville, AR. For the fiscal year ending January 31, 2023, Sam’s Club’s total revenue was $84.3 billion. There are almost 600 clubs across the U.S and Puerto Rico and each averages approximately 136,000 square feet. Our first club opened in Midwest City, Oklahoma, in 1983. Many clubs include sustainable features such as day-lighting with skylights, night dimming, central energy management, water-conserving fixtures, natural concrete floors and recycling. Sam’s Club employs thousands of associates in the U.S. and Puerto Rico. Approximately 75 percent of club management was promoted from hourly positions. In addition to the leading national brands, Sam's Club also features Member's Mark, an exclusive, premium-quality private brand. Member's Mark products are exclusive designs that use top-of-the-line materials and the highest quality ingredients to make sure they have the best quality and value at members-only prices. A Sam’s Club membership can more than pay for itself with exclusive savings on the items you need, the items you love and all sorts of unexpected items. Sam’s Club focuses on providing members with exclusive savings and quality merchandise, as well as services like Delivery from Club and Curbside Pickup, savings on fuel, full-service Pharmacy and more. We offer our members the most choices on how to shop with us, anywhere, any time. With over 40 years of innovating in the category, Sam’s Club continues to redefine club membership shopping with its curated assortment of quality fresh food and Member’s Mark® items, in addition to market leading technologies and services like Scan & Go™️, curbside pickup and home delivery. Visit the Sam's Club Newsroom, shop at SamsClub.com or connect with Sam's Club on LinkedIn, X, Facebook, Instagram, TikTok and Pinterest.
Company Details
sam's-club
45,215
381,258
43
samsclub.com
1271
SAM_1414288
Completed
Between 700 and 749

Sam's Club Global Score (TPRM)XXXX

Description: The California Office of the Attorney General disclosed a **data breach** targeting **Sam's Club** in October 2020, stemming from an incident on **September 24, 2020**. Unauthorized actors gained access to member accounts using **stolen login credentials**, compromising **personal information** of affected individuals. While the exact scope of exposed data was not detailed, such breaches typically involve sensitive details like names, contact information, membership IDs, or payment data—posing risks of identity theft, phishing, or financial fraud. The breach underscored vulnerabilities in credential security, highlighting the need for stronger authentication measures. Sam’s Club likely faced reputational damage and potential regulatory scrutiny, though no evidence suggested systemic operational disruption or ransomware involvement. Customers were advised to monitor accounts and update passwords, but the long-term impact on trust and membership retention remained a concern.
Description: In mid-November, Sam’s Club reported a data breach where unauthorized individuals gained access to customer accounts using credentials likely obtained from an external source. The incident exposed sensitive personal information, including names, phone numbers, postal addresses, and payment card details. While the exact number of affected customers remains undisclosed, the breach poses significant risks such as identity theft, financial fraud, and reputational damage. The compromised payment card data could lead to fraudulent transactions, while the exposure of personal details increases the likelihood of targeted phishing or social engineering attacks. The breach underscores vulnerabilities in credential security and the potential for cascading harm when third-party credentials are reused across platforms. Customers are advised to monitor their accounts for suspicious activity and update their login credentials to mitigate further risks.
Description: Sam's Club, a subsidiary of Walmart, is investigating a potential security incident following claims of a breach by the Clop ransomware gang. Clop has added Sam's Club to its leak site but has not yet released proof. The breach may involve the exploitation of a zero-day vulnerability in Cleo file transfer software, which Sam's Club may have used. Prior incidents include credential stuffing in 2020, but the current situation remains under investigation with no explicit customer or employee data known to be compromised.


No incidents recorded for Sam's Club in 2025.
No incidents recorded for Sam's Club in 2025.
No incidents recorded for Sam's Club in 2025.
Sam's Club cyber incidents detection timeline including parent company and subsidiaries

Sam’s Club (NYSE: WMT) a division of Walmart Inc., is the membership warehouse club solution for everyday living. Our President and CEO is Chris Nicholas and our headquarters is in Bentonville, AR. For the fiscal year ending January 31, 2023, Sam’s Club’s total revenue was $84.3 billion. There are almost 600 clubs across the U.S and Puerto Rico and each averages approximately 136,000 square feet. Our first club opened in Midwest City, Oklahoma, in 1983. Many clubs include sustainable features such as day-lighting with skylights, night dimming, central energy management, water-conserving fixtures, natural concrete floors and recycling. Sam’s Club employs thousands of associates in the U.S. and Puerto Rico. Approximately 75 percent of club management was promoted from hourly positions. In addition to the leading national brands, Sam's Club also features Member's Mark, an exclusive, premium-quality private brand. Member's Mark products are exclusive designs that use top-of-the-line materials and the highest quality ingredients to make sure they have the best quality and value at members-only prices. A Sam’s Club membership can more than pay for itself with exclusive savings on the items you need, the items you love and all sorts of unexpected items. Sam’s Club focuses on providing members with exclusive savings and quality merchandise, as well as services like Delivery from Club and Curbside Pickup, savings on fuel, full-service Pharmacy and more. We offer our members the most choices on how to shop with us, anywhere, any time. With over 40 years of innovating in the category, Sam’s Club continues to redefine club membership shopping with its curated assortment of quality fresh food and Member’s Mark® items, in addition to market leading technologies and services like Scan & Go™️, curbside pickup and home delivery. Visit the Sam's Club Newsroom, shop at SamsClub.com or connect with Sam's Club on LinkedIn, X, Facebook, Instagram, TikTok and Pinterest.


Cencosud S.A. is a Chilean based multi-format retailer with operations in Argentina, Brazil, Chile, Colombia, Peru and a commercial office in China. Through its supermarket, home improvement, department stores, shopping centers and financial services divisions, the Company targets a wide range o
Advance Auto Parts, Inc. is a leading automotive aftermarket parts provider that serves both professional installers and do-it-yourself customers. As of October 5, 2024, Advance operated 4,781 stores primarily within the United States, with additional locations in Canada, Puerto Rico and the U.S. Vi
At Starbucks, we like to say that we are not in the coffee business serving people, but in the people business serving coffee. Here, our employees - who we call partners – are the heart of the Starbucks experience, and being a partner means aspiring to become part of something bigger: inspiring posi

Fozzy Group is one of the largest trade industrial groups in Ukraine and one of the leading Ukrainian retailers, with over 700 outlets all around the country. Besides retail, the group's businesses include food production, and restaurants. Fozzy Group is introducing modern solutions in all areas

We are the leading retailer of home improvement and outdoor living products in Australia & New Zealand and a major supplier to project builders, commercial tradespeople and the housing industry. Our ambition is to provide our customers with the widest range of home improvement products in accordanc

Forget what you know about old-school industry rules. When you work at Old Navy, you’re choosing a different path. From day one, we’ve been on a mission to democratize fashion and make shopping fun again. Our teams make style accessible to everyone, creating high-quality, must-have fashion essential
Skechers is a Fortune 500® company — a growth-oriented brand that designs, develops, and markets a diverse product portfolio of lifestyle and performance footwear, apparel and accessories for men, women and children around the globe. Skechers is focused on designing products that deliver style, com

The Kroger Co., together with its subsidiaries, operates as a food retailer in the United States. The company operates three formats of supermarkets: combination food and drug stores (combo stores), multi department stores, and price impact warehouse stores or marketplace stores. The combo stores op
CarMax revolutionized the auto industry by delivering the honest, transparent and high-integrity car buying experience customers want and deserve. This disruptive thinking has helped us become the nation’s largest retailer of used cars with more than 240 stores nationwide. And thanks to our amazing
.png)
Read how St. John's University, Queens, NY, alumnus Sam Daniele '24CCPS turned his passion for technology into a successful cybersecurity...
(CNN) — Scouting America, the organization formerly known as the Boy Scouts, is giving scouts the chance to earn two merit badges that...
The Minister of Communication, Digital Technology and Innovations, Samuel Nartey George, has announced that government is working to amend...
Hackers exploited a major security flaw in widely used Microsoft server software to launch a global attack on government agencies and...
Beyond the losses, lawsuit and blame-game lie vitally important lessons for industrial cybersecurity.
Ahold Delhaize USA Services provides an update about the cybersecurity issue the company previously disclosed last year.
Major North American grocery wholesaler United Natural Foods, Inc., has disclosed that the cyberattack it experienced earlier this month...
United Natural Foods (UNFI) has informed law enforcement and is working to mitigate the attack's impact with the help of cybersecurity...
The retailer previously said it was investigating a potential cyber attack related to a vulnerability in a vendor's file transfer software.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Sam's Club is http://www.samsclub.com.
According to Rankiteo, Sam's Club’s AI-generated cybersecurity score is 732, reflecting their Moderate security posture.
According to Rankiteo, Sam's Club currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Sam's Club is not certified under SOC 2 Type 1.
According to Rankiteo, Sam's Club does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Sam's Club is not listed as GDPR compliant.
According to Rankiteo, Sam's Club does not currently maintain PCI DSS compliance.
According to Rankiteo, Sam's Club is not compliant with HIPAA regulations.
According to Rankiteo,Sam's Club is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Sam's Club operates primarily in the Retail industry.
Sam's Club employs approximately 45,215 people worldwide.
Sam's Club presently has no subsidiaries across any sectors.
Sam's Club’s official LinkedIn profile has approximately 381,258 followers.
Sam's Club is classified under the NAICS code 43, which corresponds to Retail Trade.
No, Sam's Club does not have a profile on Crunchbase.
Yes, Sam's Club maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sam's-club.
As of November 27, 2025, Rankiteo reports that Sam's Club has experienced 3 cybersecurity incidents.
Sam's Club has an estimated 15,251 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.
Title: Potential Security Incident at Sam's Club
Description: Sam's Club, a subsidiary of Walmart, is investigating a potential security incident following claims of a breach by the Clop ransomware gang. Clop has added Sam's Club to its leak site but has not yet released proof. The breach may involve the exploitation of a zero-day vulnerability in Cleo file transfer software, which Sam's Club may have used. Prior incidents include credential stuffing in 2020, but the current situation remains under investigation with no explicit customer or employee data known to be compromised.
Type: Ransomware
Attack Vector: Zero-day vulnerability exploitation
Vulnerability Exploited: Cleo file transfer software
Threat Actor: Clop ransomware gang
Title: Sam's Club Data Breach (2020)
Description: The California Office of the Attorney General reported a data breach involving Sam's Club on October 21, 2020. The breach occurred on September 24, 2020, due to unauthorized access to accounts using stolen login credentials, potentially affecting various personal information of members.
Date Detected: 2020-09-24
Date Publicly Disclosed: 2020-10-21
Type: Data Breach
Attack Vector: Unauthorized Access (Stolen Credentials)
Common Attack Types: The most common types of attacks the company has faced is Breach.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Compromised credentials (likely from another source) and Stolen Login Credentials.

Data Compromised: Personal information
Identity Theft Risk: Potential
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personally Identifiable Information (Pii), Payment Card Information, , Personal Information and .

Entity Name: Sam's Club
Entity Type: Retail
Industry: Retail / Wholesale
Location: United States (California)

Type of Data Compromised: Personal information
Personally Identifiable Information: Potential

Ransomware Strain: Clop

Regulatory Notifications: California Office of the Attorney General

Source: California Office of the Attorney General
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney General.

Investigation Status: Under investigation

Entry Point: Stolen Login Credentials

Root Causes: Unauthorized Access Via Stolen Credentials,
Last Attacking Group: The attacking group in the last incident was an Clop ransomware gang.
Most Recent Incident Detected: The most recent incident detected was on 2020-09-24.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-10-21.
Most Significant Data Compromised: The most significant data compromised in an incident were Names, Phone Numbers, Postal Addresses, Payment Card Details, , Personal Information and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Postal Addresses, Names, Phone Numbers, Personal Information and Payment Card Details.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 0.
Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Under investigation.
Most Recent Entry Point: The most recent entry point used by an initial access broker were an Compromised credentials (likely from another source) and Stolen Login Credentials.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.