CALERES, INC.

Caleres, Inc. notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access to an employee's Office 365 account occurred from March 23, 2026, to April 27, 2026, following a phishing incident. The resident's name and SSN were accessed. Caleres engaged forensic specialists, notified law enforcement, and provided 24 months of credit monitoring.

SEC 10-K Item 1C disclosure for a retail company describing its cybersecurity risk management and governance strategy. The filing states that cybersecurity threats have not materially affected the business, results of operations, or financial condition. No specific incident, breach, or material impact is disclosed.

Caleres, Inc. disclosed a security incident affecting its websites (including Famous Footwear, Sam Edelman, and Allen Edmonds) between July 7 and July 18, 2023. Unauthorized parties gained access to payment card data, including names, addresses, card numbers, expiration dates, and CVVs. Caleres engaged a cybersecurity firm, enhanced security protocols, and established a call center. No specific affected individual count was provided in the notice.

Caleres Inc. reported an external system breach (hacking) occurring between July 7 and July 18, 2023, discovered on July 24, 2023. The incident affected 13,926 individuals, including 78 Maine residents. Compromised data included names and financial account or credit/debit card numbers (with security codes/PINs). Caleres provided written notification to consumers on September 1, 2023, but did not offer identity theft protection services.

Caleres, Inc. disclosed that an unauthorized party gained access to certain websites between July 7 and July 18, 2023. The incident may have involved payment card information, including name, address, zip code, payment card number, expiration date, and CVV. Caleres engaged a cybersecurity firm and enhanced security protocols.

Caleres Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-09-01. The breach occurred from 7/7/2023 to 7/18/2023. 78 Montana residents were affected.

Caleres, Inc. notified the New Hampshire Attorney General of a security incident affecting 86 New Hampshire residents. Unauthorized access to Caleres' websites occurred between July 7 and July 18, 2023. Caleres engaged a cybersecurity firm, secured systems, and mailed notifications to affected residents on September 1, 2023.