PSA: Neiman Marcus still exists and he was hacked
Luxury retailer Neiman Marcus said Thursday it had notified 4.6 million customers as their personal information, including credit card numbers. may have been part of a data breach in May 2020.
The Dallas-based company said in a press release that an “unauthorized third party has obtained personal information associated with the online accounts of certain clients of Neiman Marcus.” Neiman Marcus informed law enforcement and “is working quickly to determine the nature and scope of the case.” The company did not say who was responsible for the breach or how it gained access to its systems.
Data access may have included names and contact information, credit card numbers and expiration dates, but not CVV numbers on the back of cards – Neiman Marcus gift cards, usernames, passwords and security questions and answers “associated with Neiman Marcus online accounts.
According to the company, more than 85% of the 3.1 million affected payment and virtual gift cards “were expired or invalid,” and no active store-brand credit cards were affected. Parent company Neiman Marcus Group (NMG) said its other retailers Bergdorf Goodman and Horchow did not appear to have been part of the breach.
After learning of the breach, NMG said it asked customers who had not changed their account passwords online since May 2020 to reset them. CEO Geoffroy van Raemdonck said that NMG “will continue to take measures to improve the security of our system and protect information”.
The company has set up a website for customers to get more information about the violation, as well as a phone number: 866-571-9725.