HackingStolen CredentialsCustomer Data InvolvedFINANCIAL_ACCOUNTCREDENTIALSLowResolved
Sam's Club
bd_64d5d6cea3603f75 · schema v1 · pii pii-v1
Full breach record for Sam's Club →Sam's Club experienced an account takeover incident via credential stuffing, where an unauthorized third party gained access to customer accounts. The breach resulted in the exposure of financial account numbers or credit/debit card numbers, along with their security codes or PINs. Affected individuals were offered 12 months of identity theft monitoring and restoration services through Experian.
Maine clockDiscovered Nov 10, 2020 → Filed with AG Dec 10, 202030d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ac1ed11c901502c4Montana State AGfiled 2020-12-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8bcf27dd-7f39-46e1-8c55-6b2daad8826f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2020
- Raw hash
- ae3171a9d73f5e6c50958d8bbe8584081367ab7444cf83ffcfd696d89d86b869
Reporting entity
- Name
- Sam's Clubnorm: sam s club
- Domain
- samsclub.com
Victim entity
- Name
- Sam's Clubnorm: sam s club
- Domain
- samsclub.com
Incident
- Discovered
- Nov 10, 2020
- Materiality determined
- —
- Notification sent
- Dec 10, 2020
- Affected individuals
- 2
- Data types
- FINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 10, 2020→ Filed with AG: Dec 10, 202030d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.