MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedMulti-Stage ChainPIIFinancial accountIdentity (basic)HighActive

NEIMAN MARCUS GROUP LTD LLC

bd_ce677eb2ffa7b894 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 1, 2014

Filed

Jan 25, 2014

To disclose

24 days

Affected · nationwide

1,100,0009,680 in this filing

Linked

3 filings

Confidence

64%

Full breach record for NEIMAN MARCUS GROUP LTD LLC →4 incidents on file

Neiman Marcus Group disclosed a cybersecurity intrusion involving scraping malware installed in payment systems between July and October 2013. The malware captured payment card data (Track One data) from approximately 1.1 million customers. The incident was discovered in January 2014. The company notified law enforcement (Secret Service), engaged forensic investigators, and offered one year of credit monitoring to affected customers. 9,680 Hawaii residents were identified as affected.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due24 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 169 days

discovery → filing · 24 days

Jul 16, 2013

Begins

Jan 1, 2014

Discovered

Jan 25, 2014

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_34ce9041381e0ab42014-01-25Candidate
Massachusetts State AGbd_a91dc7ba750d6a942014-01-27 · +2dVerified

Name: NEIMAN MARCUS GROUP LTD LLC
norm: neiman marcus

Name: NEIMAN MARCUS GROUP LTD LLC
norm: neiman marcus
Industry: Retail & Consumerllm

Discovered: Jan 1, 2014
Breach occurred: Jul 16, 2013 – Oct 30, 2013
Undetected for: 169 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 22, 2014
Affected individuals: 1,100,000state + nationwide
Data types: PIIFinancial accountIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input CaptureT1071 Application Layer Protocol
Threat actor: ExternalFinancial
Regulator citations: Notified Hawaii Attorney GeneralWorking with U.S. Secret Service

During the incident: Contacting and working directly with federal law enforcement agencies
Conducting a full review of all of its payment card information systems and vulnerability assessment with the payment brands, its merchant processor, a leading investigations, intelligence and risk management firm, and a leading payment brand approved forensics firm
Reviewing its intrusion detection systems and firewalls
Reinforcing its security tools
Reviewing and hardening its systems
Modifying its software and security credentials
Searching for and removing all malware it discovers in the course of its investigation
Changes made: Offering one free year of credit monitoring and identity theft protection to all customers
Enhancing security tools
Assessing and reinforcing related payment card systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: HI CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGJan 25 · first

Hawaii State AGJan 25 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2015/12/OCP-2014-0039.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2014
Raw hash: 80cedfc2c2d97bdd4ec76381e7740b73423ce4356759ee86b0eb39c8bb9e22be

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNEIMAN MARCUS GROUP LTD LLC

Victim entityNEIMAN MARCUS GROUP LTD LLC

Incidentdiscovered Jan 1, 2014

Stated responseContacting and working directly with federal law enforcement agencies

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org