Neiman Marcus said Thursday that 1.1 million payment cards may have been impacted by the data security breach the retailer disclosed on Jan. 10.
At the time, the luxury chain said it didn’t know how many customers had credit and personal information stolen.
In an open letter to customers on Thursday, Karen Katz, Neiman’s president and chief executive officer, said the ongoing forensic and criminal investigations have determined that malware was installed on the retailer’s system between July 16 and Oct. 20, when the malware actively tried to collect payment card data from 1.1 million cards.
Visa, MasterCard and Discover have told Neiman’s that about 2,400 unique customer payment cards used at Neiman Marcus and Last Call stores were used fraudulently. Neiman’s said its proprietary credit card and the Bergdorf Goodman card have not seen any fraudulent activity. In addition, Neiman’s said social security numbers and birth dates weren’t compromised, and online transactions don’t appear to have been impacted.
PINs were never at risk because Neiman’s doesn’t use PIN pads in its stores.
Neiman’s said it’s notifying all customers for whom it has contact information and who shopped at stores between January 2013 and January 2014 of the situation. It’s offering one free year of credit monitoring and identity-theft protection to concerned customers.
Neiman’s is taking several steps to contain the situation, including reviewing its intrusion detection systems and firewalls, reinforcing security tools, reviewing and hardening systems, modifying software and security credentials and searching for and disabling all malware discovered in the course of the investigation.
The scope of the attack on Neiman’s is much smaller than the data security breach at Target, where an initial 40 million shoppers in U.S. stores potentially had credit or debit card information stolen. Target later learned that another 70 million consumers may have had their names, addresses, e-mail addresses and/or phone numbers taken.
Target said Thursday that executive vice president and chief financial officer John Mulligan will testify on Feb. 4 about the data attack before the U.S. Senate Judiciary Committee at a hearing, “Privacy in the Digital Age: Preventing Data Breaches and Combating Cybercrime.” Sen. Patrick Leahy (D., Vt.) chairs the committee and has written data security legislation that is under consideration. Mulligan oversees Target’s financial portfolio, including its finance and retail services. RELATED STORY: NRF Letter Calls for Financial Industry Support >>
In a separate action, a group of House Democrats is seeking information from Target chairman, president and ceo Gregg Steinhafel as the House Energy and Commerce Committee prepares to hold its own hearing into the security breach during the week of Feb. 3.
Reps. Henry Waxman (D., Calif.), Jan Schakowsky (D., Ill.) and Diana DeGette (D., Colo.) asked Steinhafel for all of Target’s written policies or guidelines related to threat monitoring, network security or point-of-sale protection and documents listing how much Target has spent on network security systems and personnel, among other things.
“Questions remain about how exactly this attack was carried out, who was responsible, whether it could have been prevented, how Target responded, and how retailers and customers can protect themselves going forward,” the letter said.
A Target spokeswoman said she had no information on the letter or the second hearing.
Also on Thursday, at the U.S. Conference of Mayors, Bill Simon, ceo and president of Wal-Mart U.S., was asked what defense against data breaches the world’s largest retailer has in place. “Very clearly, we are concerned,” Simon said. “At Wal-Mart we are fortunate not to have had any of the major issues today, but it’s a constant threat and something we are constantly vigilant against. We are known for our IT systems and we work very hard to protect our data. It is something not only retailers are having to deal with but anybody in the public domain that handles information is subject to the threat.”
He pointed to efforts by the National Retail Federation and Retail Industry Leaders Association to address the problem in recent days.
@chanel and @pharrell dropped what’s being dubbed as the world’s most exclusive sneakers yesterday. The Adidas Originals NMD Hu, which Williams designed in collaboration with Chanel and @adidasoriginals, has a waiting list of over 120K people who pre-registered online at chanelatcolette.fr –– and only 500 pairs are on sale. The singer predicted the resale value of the shoes could reach $40K. Read the full interview on WWD.com. Link in bio. #wwdfashion (📷: Dominique Maître)
@imanshumpert is diving deeper into his creative endeavors and relaunching his clothing line, Post 90s, and is helping to raise money for the hurricane victims in St. Maarten with a jersey he’s designed with his brother. The Cleveland Cavaliers player talked to WWD about kneeling during the national anthem, working with fashion brands and how he wants to be more than an @nba player. Read the interview on WWD.com #wwdfashion (📷: George Chinese)
Not only does #TheProfit return to CNBC tonight, but @marcuslemonis has launched @shopmarcus, a new shopping and lifestyle retail experience in Aspen and Chicago, with more locations to come. The retail stores offer in-store stylists and a variety of contemporary womenswear selections.
“It’s life, I’m going to face it,” @mingxi11 sighed. “I fell, but you know, I think the most important thing is that I get back up. I had the love, the help from my sister — the girl next to me Gizele [Oliveira] — she’s so nice. When I went backstage everybody was trying to comfort me like ‘Oh Ming, it’s OK.’ I’m really, really touched. I think it’s them who gave me the courage to go back on stage for the finale,” Xi told WWD of her fall at the @victoriassecret fashion show. (📷: David Fisher) #wwdfashion #vsfashionshow #victoriassecret
@louisvuitton tapped @therealpeterlindbergh for its latest city-centric photo book, which is part of a series called Fashion Eye. The primarily black and white book captures the spirit of Berlin in 57 images shot between 1989 and 2019. “Berlin is an inspiration for me, more than a city. I mean @millajovovich is simply Berlin!” said Lindbergh. #wwdfashion
“You know, I think audiences expect a certain performance so I have to deliver to them what they’re expecting to a certain degree. But I’m also a different actor and a different person, I have my own spin on the character,” says @noahegalvin of his takeover of the leading role in “Dear Evan Hansen” following the departure of @bensplatt, who originated the role. Read WWD’s interview with the 23-year-old actor on WWD.com #wwdeye (📷: @jilliansollazzo)
For pre-fall 2018, @etro created richly-colored wonderland, using tapestries, textiles and wallpapers from the Eastern world at large. The line featured floral and graphic prints and jacquard motifs, like this two-piece look featured here. #wwdfashion (📷: Giovanna Pavesi)
@kith is moving into children’s. The men’s and women’s streetwear brand has launched Kidset, a Kith kids line located in New York at 64 Bleecker Street. The line includes mini versions of staple Kith pieces like the Astor bomber jacket and the Kith box logo sweatshirts, along with a wall that can display up to 120 pairs of shoes from @adidas, @newbalance, @timberland and more. #wwdfashion
“I just wanted to create this fully rounded character, but I do think what excited me most was just the opportunity to give a group of people representation that I feel needs it. I like to do characters in projects that stand for something and Karolina definitely does, so that was really exciting to me,” @ginnygardner says of her new role in @hulu’s “The Runaways.” Gardner plays Karolina Dean, a queer superhero, which is a rarity for @marvel. Read more about Gardner’s character on WWD.com #wwdeye (📷: @dandoperalski)