Costco Wholesale Corporation

Costco Wholesale Corporation operates a network of retail warehouses offering bulk merchandise across diverse product categories, including groceries, electronics, and household goods. The company facilitates in-person transactions through point-of-sale systems at its physical locations, directly processing customer payments. Its business model centers on high-volume sales through warehouse-style stores, serving consumer and business clients primarily in the United States. The organization maintains a significant brick-and-mortar retail presence, with security protocols focused on safeguarding transactional data during customer purchases.

A payment card data breach occurred on November 5, 2021, when routine inspections revealed a physical skimming device installed at one of Costco's retail warehouses. The illicit apparatus targeted point-of-sale terminals, potentially capturing magnetic stripe data from customers' payment cards during transactions. Compromised information included cardholder names, account numbers, expiration dates, and CVV security codes. Upon discovery, Costco immediately removed the skimming device and initiated collaboration with law enforcement agencies to investigate the incident. The corporation notified potentially affected individuals about the breach but did not disclose specific warehouse locations or the total number of impacted customers.

The breach underscored vulnerabilities in physical payment processing environments despite routine security checks. Costco advised cardholders to monitor financial statements for unauthorized transactions but did not confirm the operational duration of the skimmer or the definitive scope of data exfiltration. This incident highlighted operational security challenges inherent to large-scale retail environments handling sensitive payment information. The company's response demonstrated standard breach management practices involving device removal, external investigations, and selective customer notifications while maintaining discretion about investigative details.