Costco Wholesale Corporation
- Aliases / services
- Costco / Costco Photo Center / コストコ（米国） / Costco Wholesale Corporation
- Official website
- https://www.costco.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Former US Costco Photo Center
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30
A 2015 notice described a hosting-provider intrusion between June 19, 2014 and July 15, 2015, potentially capturing information typed into the photo site, including email addresses, passwords and card security codes. Costco.com itself was unaffected. The former photo site closed on January 28, 2023.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Change passwords on other services if you still reuse your former photo-site password. This is not a notice that the closed site has reopened or can currently accept password resets.
Official service URL
Source URLs
- Official operator evidencehttps://www.costco.com/f/-/terms-and-conditions-of-useService and operation documentation
- Official incident noticehttps://oag.ca.gov/system/files/Costco%20Stored%20Card%20Email%20Notice_0.PDFService and operation documentation
- Former photo site closurehttps://support.shutterfly.com/s/article/costco-partnership-benefitsService and operation documentation
Related official sources
- Official operator evidenceOfficial information directoryIdentifies Costco Wholesale Corporation and the relevant scope.
- Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.
- Former photo site closureOfficial notice; link to this PHP incident unconfirmedConfirms closure on January 28, 2023.
Comments