Important information about customer online accounts
Neiman Marcus
1618 Main Street
Dallas, Texas 75201
September 30, 2021
NOTICE OF DATA BREACH
To Our Customers,
We are writing about an issue that may involve certain of our customers’ Neiman Marcus online account information.
What Happened?
In September 2021, we learned that in May 2020 an unauthorized party obtained personal information associated with certain of our customers’ online accounts.
What Information Was Involved?
The personal information for affected customers varied and may have included names and contact information; payment card numbers and expiration dates (without CVV numbers); Neiman Marcus virtual gift card numbers (without PINs); and usernames, passwords, and security questions and answers associated with Neiman Marcus online accounts. More than 85% of affected payment and virtual gift cards are expired or invalid.
What We Are Doing
Promptly after learning of the issue, we engaged a leading cybersecurity expert and notified law enforcement. Our investigation is ongoing, and we are working quickly to determine the nature and scope of the matter. To protect our customers, we required an online account password reset for affected customers who had not changed their password since May 2020. We will continue to take actions to enhance our system security and safeguard information.
What You Can Do
We deeply regret that this incident occurred. We take our obligation to safeguard personal information very seriously and are alerting affected customers so they can take steps to help protect their information. These steps include the following:
For customers who detect unauthorized transactions involving their payment cards, please contact the relevant payment card company or financial institution.
Affected customers should change their credentials for any other online account if they used credentials that are the same as or similar to those used for their Neiman Marcus account.
Order a credit report. Customers are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. To order a free credit report, visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. We encourage affected customers to remain vigilant by reviewing their account statements and monitoring their free credit reports.
The Reference Guide below provides recommendations by the U.S. Federal Trade Commission on the protection of personal information.
For More Information
We hope this information is useful. For more details about this issue, please call (866) 571-9725 Monday through Friday 8 a.m. – 10 p.m. CST, Saturday and Sunday 10 a.m. – 7 p.m. CST (excluding major U.S. holidays). Please be prepared to provide engagement number B019206.
We regret any inconvenience this may cause affected customers.
Sincerely,
David Goubert
President and Chief Customer Officer
Questions You May Have
Do you know who did this?
We do not know the identity of the unauthorized party and are coordinating with law enforcement.
Who is being notified?
We are notifying affected customers to provide information on how they can protect their personal information.
I received an email about this issue. How do I know it is really from Neiman Marcus?
Click here to view the content of our email notice to affected customers. Please note that the email from Neiman Marcus about this issue does not contain any attachments or request your personal information. If the email you received about this issue suggests that you download an attachment or asks you for information, the email was not sent by Neiman Marcus. Avoid clicking on links or downloading attachments from suspicious emails.
Should affected customers change their password or security questions and answers for their Neiman Marcus online account?
To protect our customers, we required an online account password reset for affected customers who had not changed their password since May 2020. You can change your password by navigating to “Your Account” on www.neimanmarcus.com.
For security questions and answers, there is no need to take any action on your Neiman Marcus online account because we discontinued use of security questions and answers for online accounts.
We recommend that affected customers change their credentials for any other online account if they used credentials that are the same as or similar to those used for their Neiman Marcus account.
Reference Guide
We encourage affected customers to take the following steps:
Order Your Free Credit Report.
To order your free credit report, visit www.annualcreditreport.com, call toll-free at 1-877-322-8228, or complete the Annual Credit Report Request Form on the U.S. Federal Trade Commission’s (“FTC’s”) website at www.consumer.ftc.gov and mail it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281. The three nationwide consumer reporting agencies provide free annual credit reports only through the website, toll-free number or request form.
When you receive your credit report, review it carefully. Look for accounts you did not open. Look in the “inquiries” section for names of creditors from whom you have not requested credit. Some companies bill under names other than their store or commercial names. The consumer reporting agency will be able to tell you when that is the case. Look in the “personal information” section for any inaccuracies in your information (such as home address and Social Security number). If you see anything you do not understand, call the consumer reporting agency at the telephone number on the report. Errors in this information may be a warning sign of possible identity theft. You should notify the consumer reporting agencies of any inaccuracies in your report, whether due to error or fraud, as soon as possible so the information can be investigated and, if found to be in error, corrected. If there are accounts or charges you did not authorize, immediately notify the appropriate consumer reporting agency by telephone and in writing. Consumer reporting agency staff will review your report with you. If the information cannot be explained, then you will need to call the creditors involved. Information that cannot be explained also should be reported to your local police or sheriff’s office because it may signal criminal activity.
Report Incidents.
If you detect any unauthorized transactions in a financial account, promptly notify your payment card company or financial institution. If you detect any incident of identity theft or fraud, promptly report the incident to law enforcement, the FTC and your state Attorney General. If you believe your identity has been stolen, the FTC recommends that you take these steps:
Close the accounts that you have confirmed or believe have been tampered with or opened fraudulently. For streamlined checklists and sample letters to help guide you through the recovery process, please visit www.identitytheft.gov.
File a local police report. Obtain a copy of the police report and submit it to your creditors and any others that may require proof of the identity theft crime.
You can contact the FTC to learn more about how to protect yourself from becoming a victim of identity theft and how to repair identity theft:
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
1-877-IDTHEFT (438-4338)
Consider Placing a Fraud Alert on Your Credit File.
To protect yourself from possible identity theft, consider placing a fraud alert on your credit file. A fraud alert helps protect you against the possibility of an identity thief opening new credit accounts in your name. When a merchant checks the credit history of someone applying for credit, the merchant gets a notice that the applicant may be the victim of identity theft. The alert notifies the merchant to take steps to verify the identity of the applicant. You can place a fraud alert on your credit report by calling any one of the toll-free numbers provided below. You will reach an automated telephone system that allows you to flag your file with a fraud alert at all three consumer reporting agencies. For more information on fraud alerts, you also may contact the FTC as described above.
Equifax
Equifax Information Services LLC
P.O. Box 740241
Atlanta, GA 30374
1-800-525-6285
Experian
Experian Inc.
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
TransUnion
TransUnion LLC
P.O. Box 2000
Chester, PA 19016
1-800-680-7289
Consider Placing a Security Freeze on Your Credit File.
You may wish to place a “security freeze” (also known as a “credit freeze”) on your credit file. A security freeze is designed to prevent potential creditors from accessing your credit file at the consumer reporting agencies without your consent. Unlike a fraud alert, you must place a security freeze on your credit file at each consumer reporting agency individually. There is no charge to place or lift a security freeze. For more information on security freezes, you may contact the three nationwide consumer reporting agencies or the FTC as described above. As the instructions for establishing a security freeze differ from state to state, please contact the three nationwide consumer reporting agencies to find out more information.
The consumer reporting agencies may require proper identification prior to honoring your request. For example, you may be asked to provide:
Your full name with middle initial and generation (such as Jr., Sr., II, III)
Your Social Security number
Your date of birth
Addresses where you have lived over the past five years
A legible copy of a government-issued identification card (such as a state driver’s license or military ID card)
Proof of your current residential address (such as a current utility bill or account statement)
For Iowa Residents. You may contact law enforcement or the Iowa Attorney General’s Office to report suspected incidents of identity theft. This office can be reached at:
Office of the Attorney General of Iowa
Hoover State Office Building
1305 E. Walnut Street
Des Moines, IA 50319
(515) 281-5164
For Maryland Residents. You can obtain information from the Maryland Office of the Attorney General about steps you can take to avoid identity theft. You may contact the Maryland Attorney General at:
Maryland Office of the Attorney General
Consumer Protection Division
200 St. Paul Place
Baltimore, MD 21202
(888) 743-0023 (toll-free in Maryland)
(410) 576-6300
www.marylandattorneygeneral.gov
For Massachusetts Residents. You have the right to obtain a police report and request a security freeze as described above. The consumer reporting agencies may require that you provide certain personal information (such as your name, Social Security number, date of birth, and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to honoring your request to place a security freeze on your account.
For New Mexico Residents. You have rights under the federal Fair Credit Reporting Act (“FCRA”). These include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, please visit https://www.consumer.ftc.gov/articles/pdf-0096-fair-credit-reporting-act.pdf or www.ftc.gov.
For New York Residents. You can obtain information from the New York State Office of the Attorney General about how to protect yourself from identity theft and tips on how to protect your privacy online. You can contact the New York State Office of the Attorney General at:
Office of the Attorney General
The Capitol
Albany, NY 12224-0341
1-800-771-7755 (toll-free)
1-800-788-9898 (TDD/TTY toll-free line)
Bureau of Internet and Technology (BIT)
28 Liberty Street
New York, NY 10005
Phone: (212) 416-8433
https://ag.ny.gov/internet/resource-center
For North Carolina Residents. You can obtain information from the North Carolina Attorney General’s Office about preventing identity theft. You can contact the North Carolina Attorney General at:
North Carolina Attorney General’s Office
9001 Mail Service Center
Raleigh, NC 27699-9001
(877) 566-7226 (toll-free in North Carolina)
(919) 716-6400
For Oregon Residents. We encourage you to report suspected identity theft to the Oregon Attorney General at:
Oregon Department of Justice
1162 Court Street NE
Salem, OR 97301-4096
(877) 877-9392 (toll-free in Oregon)
(503) 378-4400
For Rhode Island Residents. You may obtain information about preventing and avoiding identity theft from the Rhode Island Office of the Attorney General at:
Rhode Island Office of the Attorney General
Consumer Protection Unit
150 South Main Street
Providence, RI 02903
(401) 274-4400
You have the right to obtain a police report and request a security freeze as described above. The consumer reporting agencies may require that you provide certain personal information (such as your name, Social Security number, date of birth, and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to honoring your request for a security freeze on your account.
For Washington, D.C. Residents. You may obtain information about preventing and avoiding identity theft from the Office of the Attorney General for the District of Columbia at:
Office of the Attorney General for the District of Columbia
400 6th Street NW
Suite 1100 South
Washington, D.C. 20001
(202) 727-3400
Sign up for text messages
Download NM App
