AccidentalFinancial ServicesRetail & ConsumerFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Financial accountLowResolved

Nordstrom Bank

bd_3ea64d16cbdd4539 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 7, 2012

Filed

Aug 1, 2012

To disclose

8 weeks

Affected

10state residents only

Linked

2 filings

Confidence

68%

Nordstrom Bank reported an administrative processing error in New Hampshire where cardholder statements, replacement credit cards, or correspondence were mailed to the wrong recipient due to a mailing address reformatting software error. The issue was detected on June 7, 2012, and 10 customers in NH were impacted. Nordstrom Bank resolved the issue, contacted affected customers, and offered one year of complimentary credit monitoring through Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 55 days

Jun 7, 2012

Discovered

Aug 1, 2012

Filed

vs. sector median

1 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_ada11f00639e5daa2012-08-07 · +6dCandidate

Name: Nordstrom Bank
norm: nordstrom bank
Domain: nordstromcard.com

Name: Nordstrom Bank
norm: nordstrom bank
Domain: nordstromcard.com
Industry: Financial ServicesllmRetail & Consumerllm

Discovered: Jun 7, 2012
Materiality determined: —
Notification sent: —
Affected individuals: 10state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unknown
Regulator citations: Notified NH Department of Justice, Office of the Attorney General

During the incident: Offered complimentary credit monitoring services through Equifax
Contacted impacted customers by phone
Followed up with written correspondence
Discontinued the system software causing the error
Made adjustments to affected accounts
Changes made: Discontinued the system software that caused the error
Made adjustments to affected accounts to prevent past-due status
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(55 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 1 · first · this page

California State AG+6d

Pattern: first filing Aug 1 (NH), last Aug 7 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nordstrom-20120801.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2012
Raw hash: 9ffe2a021899dc0a3572fc40d0149488145ef1b32f0aeee760eee1dd27ff330d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNordstrom Bank

Victim entityNordstrom Bank

Incidentdiscovered Jun 7, 2012

Stated responseOffered complimentary credit monitoring services through Equifax

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov