HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
The Neiman Marcus Group LLC
bd_15782e1cfc3aa51c · schema v1 · pii pii-v1
Full breach record for The Neiman Marcus Group LLC →The Neiman Marcus Group notified consumers that an unauthorized third party accessed a database platform between April and May 2024. Affected data included names, contact info, DOB, and gift card numbers. Neiman Marcus disabled access, engaged cybersecurity experts, and notified law enforcement. No specific count of affected individuals was provided in the filing.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_20a9bdf459d30c0cMaine State AGfiled 2024-06-24Candidate
- bd_da2d639b3b13374bWashington State AGfiled 2024-06-24Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-24-neiman-marcus-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2024
- Raw hash
- a99210d56357d5abd10600a7b4f736c722090d1057cba110e11b08fb2e1215ab
Reporting entity
- Name
- The Neiman Marcus Group LLCnorm: the neiman marcus
Victim entity
- Name
- The Neiman Marcus Group LLCnorm: the neiman marcus
Incident
- Discovered
- May 1, 2024
- Materiality determined
- —
- Notification sent
- Jun 24, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(54 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.