Retail giant Sam’s Club investigates Clop ransomware breach claims

​Sam's Club, an American warehouse supermarket chain owned by U.S. retail giant Walmart, is investigating claims of a Clop ransomware breach. The Walmart division operates over 600 warehouse clubs with millions of members across the United States and Puerto Rico and almost 200 additional locations in Mexico and China. Sam's Club has over 2.3 million employees and reported a total revenue of $84.3 billion for the fiscal year ending January 31, 2023. "We are aware of reports regarding a potential security incident and are actively investigating the matter," a Sam's Club spokesperson told BleepingComputer. "Protecting the privacy and security of our members' information is a top priority at Sam's Club. We take these concerns seriously and will communicate further as appropriate." While the company didn't provide additional details regarding this ongoing investigation, the Clop ransomware gang added a new Sam's Club entry to its dark web leak site on Friday. The cybercrime group has yet to publish any proof of the breach, and so far, the threat actors only said on their leak site that the Arkansas wholesaler "doesn't care about its customers, it ignored their security." ​Clop's claims of a Sam's Club breach come after the ransomware gang also started extorting dozens of victims in January, breached in a massive wave of data theft attacks targeting a zero-day vulnerability (CVE-2024-50623) in Cleo secure file transfer software patched in October. While it's currently unknown how ...