Retail giant Neiman Marcus is working with law enforcement and third-party cyber security experts to investigate a recently discovered data breach from May 2020. The company has released a statement notifying 4.6 million customers that their online account information may have been stolen by a third party.
The company’s press release, issued on September 30th, 2021, stated compromised data “may have included names and contact information; payment card numbers and expiration dates (without CVV numbers); Neiman Marcus virtual gift card numbers (without PINs); and usernames, passwords, and security questions and answers associated with Neiman Marcus online account.”
As the breach took place some 17 months ago, Neiman Marcus is establishing protocols such as enforcing an online account password reset for customers who haven’t changed their passwords from May of 2020. The company is also providing affected customers with support services via a dedicated website and call centre.