The Neiman Marcus Group reported a data security breach to the California Attorney General. The incident occurred on December 26, 2015. The breach involved PCI (payment card industry) and PII (personally identifiable information) data, including identity basic information and financial account details. The specific attack vector, number of affected individuals, and discovery date are not disclosed in the provided summary or attachment text.