Sam's Club notified the New Hampshire Attorney General on December 18, 2020, of a data security incident discovered on November 19, 2020. An unauthorized party used stolen credentials (email and password) from an unrelated source to access member accounts. The attacker may have conducted fraudulent transactions involving Sam's Club Cash Rewards and accessed personal information including names, addresses, membership IDs, and partial payment card details. One New Hampshire resident was affected. Sam's Club reset passwords, implemented fraud defenses, and offered one year of credit monitoring.
Affected (this filing): 1