Skip to main content

Sam’s Club Data Breach Investigation | Ransomware Attack

Written by Joseph Lyon on . Posted in Data Breach.

The data breach lawyers at The Lyon Firm are investigating a data security incident reported by Walmart regarding an attack on personal data tied to Sam’s Club members. A notorious ransomware group has taken responsibility for the attack. If you believe your personal information has been compromised in this incident, contact our legal team to discuss how to protect yourself and to consider taking legal action.

What Happened at Sam’s Club?

Sam’s Club, the Walmart-operated warehouse chain, has reported falling victim to the infamous Cl0p ransomware group. The C10P ransomware gang has claimed responsibility for 385 attacks in the first few weeks of 2025.

A Walmart spokesman said this week, “We are aware of reports regarding a potential security incident and are actively investigating the matter. Protecting the privacy and security of our members’ information is a top priority at Sam’s. We take these concerns seriously and will communicate further as appropriate.”

This Walmart division collects and stores a large amount of personal data for its members as it runs a customer financing program with Sam’s Club credit cards. Sam’s warehouses also fill medical prescriptions and offer free health screenings, so they have a wide range of financial and health data in their files and make them a valuable target for a cyberattack. Sam’s Club also employs tens of thousands of staff, whose personally identifiable information may also be at risk.

Researchers from CyberNews discovered the leaked information. It is early in the investigation, and the full scope of the data breach isn’t yet known.

If you receive a data breach notification from Walmart or Sam’s Club it is important to understand the increased risks to your personal data. Contact an experienced data breach lawyer to discuss how to protect yourself and to consider legal action. We have filed numerous class action data breach lawsuits on behalf of clients in all fifty states. We seek compensation and corporate accountability.