I'm no expert on internet security but this very, VERY bad. This is spam/phishing (???) sent by someone at a random email address, but it appears to Gmail to be signed by costco.com. The contents of the email look totally legitimate, but it's missing my member ID.
