BJ's Wholesale Club
Disclosed Jun 16, 200521 years agoSettled
Lax security let thieves steal card data used for millions in fraud
The FTC charged that BJ's failed to take appropriate security measures for card data collected in its stores, letting an unauthorized person obtain card information of thousands of customers that was used for millions of dollars in fraudulent purchases. Banks had claimed about $13 million from BJ's by May 2005.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 16, 2005 |
| Attack | Hacking |
| Data exposed | Names, Payment cards |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | FTC consent order with 20 years of security audits (2005) |
Sources
| Source | |
|---|---|
| BJ's Wholesale Club Settles FTC Chargesftc.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 16, 2005 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.