// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Sam's Club
Breach Record

Sam's Club

DISCLOSED 2025-04-22 · UNPATCHED CVE

Sam's Club, a Walmart subsidiary, faces a lawsuit alleging negligence in protecting personal information of customers and employees. The breach is linked to a vulnerability in Cleo Communications' file-transfer system. The exact number of affected individuals and breach date are not disclosed.

The record

What we know

Disclosed
2025-04-22
Attack vector
Unpatched Cve
Sector
retail
Country
US
Data classes exposed
personal information
Sources

Cited reporting

↗ news.bloomberglaw.com (2025-04-22)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 Cox Enterprises · 2025-11-28 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Oracle · 2025-11-21 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28

This page is the permanent ColdRecon entry for the Sam's Club disclosure. It updates if new public reporting emerges. All tracked breaches →

Sam's Club just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →