Breachesby GlyphBJ's Wholesale Club
Disclosed Jun 16, 2005Settled
Lax security let thieves steal card data used for millions in fraud
The FTC charged that BJ's failed to take appropriate security measures for card data collected in its stores, letting an unauthorized person obtain card information of thousands of customers that was used for millions of dollars in fraudulent purchases. Banks had claimed about $13 million from BJ's by May 2005.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 16, 2005 |
| Attack | Hacking |
| Data exposed | NamesPayment cards |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | FTC consent order with 20 years of security audits (2005) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.