HackingRetail & ConsumerRetailBrute ForceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Financial accountCredentialsMediumContained

NEIMAN MARCUS GROUP LTD LLC

bd_ef568e0d2bd4a463 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 14, 2017

To disclose

—

Affected · nationwide

6,49417 in this filing

Confidence

66%

All records for NEIMAN MARCUS GROUP LTD LLC →4 incidents on file

Account takeover notice

NEIMAN MARCUS GROUP LTD LLC notified customers of unauthorized access to their accounts. The filing says: “Unauthorized individuals began attempting to access NMG customers' online accounts on or about December 26, 2015 with respect to Neiman Marcus, Bergdorf Goodman, Last Call, CUSP, and Horchow websites (collectively the "NMG websites") by trying various login and password combinations using automated attacks.”

Neiman Marcus Group notified NH AG of a security incident starting Dec 26, 2015, where automated attacks targeted customer online accounts. Intruders accessed names, contact info, purchase history, and full payment card numbers. 17 NH residents and 6,494 total customers affected. Notification began April 14, 2017. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 26, 2015

Begins

Apr 14, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6,494 affectedView incident

Name: The Neiman Marcus Group LLC
norm: the neiman marcus

Name: NEIMAN MARCUS GROUP LTD LLC
norm: neiman marcus
Industry: Retail & Consumerllm

Discovered: —
Account access: Dec 26, 2015
Materiality determined: —
Notification sent: Apr 14, 2017
Affected individuals: 6,494state + nationwide
Data types: Identity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1110 Brute ForceT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Engaged outside forensic experts to investigate
Required all known affected customers to change their password
Notified federal law enforcement
Notified payment processor to address issues related to potentially compromised cards
Provided one year of free credit monitoring and identity theft protection services
Changes made: Protected online accounts by requiring password reset before account use
Encouraged customers to change username and password on all NMG websites and other sites where same combination was used
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/neiman-marcus-20170414.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2017
Raw hash: fe75030b2e7f6568e2a35ebbe53bad2766cea5ae3bcc703b1ec2a9df1b8e8600

Reporting entityThe Neiman Marcus Group LLC

Victim entityNEIMAN MARCUS GROUP LTD LLC

IncidentUnauthorized Access

Stated responseEngaged outside forensic experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov