ShellCodeX Breach Report
Neiman Marcus Data Breach
neimanmarcus.com
Verified breach
Accounts exposed
31,152,842
Breach date
14 Apr 2024
Added to tracker
09 Jul 2024
Data classes
8
What happened
In May 2024, the American luxury retailer Neiman Marcus suffered a data breach which was later posted to a popular hacking forum. The data included 31M unique email addresses, names, phone numbers, dates of birth, physical addresses and partial credit card data (note: this is insufficient to make purchases). The breach was traced back to a series of attacks against the Snowflake cloud service which impacted 165 organisations worldwide.
Exposed data
Dates of birth
Email addresses
IP addresses
Names
Partial credit card data
Phone numbers
Physical addresses
Purchases
Recommended actions
- Watch for targeted phishing emails referencing Neiman Marcus โ attackers weaponise breach data quickly.
- Monitor your bank and card statements closely and consider requesting a card replacement.
- Stay alert for smishing (SMS phishing) and SIM-swap attempts using your phone number.
- Exposed identity data raises identity-theft risk โ consider credit monitoring or a credit freeze.
- Check whether your email address appears in this breach on haveibeenpwned.com.
Am I affected?
Check whether your email address appears in this breach.
Check on HIBP