Neiman Marcus disclosed a significant data breach affecting its customers, revealing that personal information stored on a database platform was compromised between April and May 2024. The breach included details such as names, contact information, and gift card numbers, impacting over 64,000 individuals.
Following the breach discovery in May, Neiman Marcus promptly disabled access to the affected database and initiated an investigation with cybersecurity experts and law enforcement. Despite these measures, a hacker known as ‘Sp1d3r’ offered to sell a database containing information from 180 million users, including extensive customer transaction records and employee data.
The breach, allegedly linked to the Snowflake hack targeting cloud storage customers, underscores ongoing cybersecurity challenges for Neiman Marcus, which has faced multiple data breaches in the past decade. The retailer’s response and the hacker’s claims are currently under scrutiny amid efforts to confirm the extent of the compromised data.