Costco

Costco notified Montana employees that Sabre, a third-party travel booking provider, experienced a data breach between Aug 2016 and Mar 2017. Stolen credentials allowed access to encrypted hotel reservation data including names, addresses, payment card numbers, and potentially security codes. Costco discovered the breach in late June 2017 and offered identity theft protection services.

Costco reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-07-10. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Costco reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-09-25. 2,592 Massachusetts residents were affected. The report records the breach type as electronic.

Costco Photo Center experienced a security compromise via its hosting provider. An unauthorized party accessed the host system from June 19, 2014, to July 15, 2015, deploying malware that captured user input. Costco notified approximately 198 New Hampshire residents whose credit card info, names, addresses, emails, and passwords may have been compromised. Costco engaged forensic investigators, took the site offline, deleted stored card data, and provided credit monitoring services.

Costco notified Washington AG of a security compromise at its online Photo Center host. An unauthorized party accessed the host system from June 19, 2014, to July 15, 2015, deploying malware that captured user input. Costco discovered the incident on July 17, 2015, when the host disabled payment processing. Approximately 29,425 Washington residents were notified. Compromised data included credit card details, names, addresses, emails, and passwords. Costco took the site offline, engaged forensic investigators, deleted stored card data, and offered credit monitoring.