Macy's
Disclosed Jul 1, 20188 years ago162,507 affectedConfirmed
What is known
| People affected | 162,507 (as reported by the organization) |
|---|---|
| Disclosed | Jul 1, 2018 |
| Discovered | Jun 11, 2018 |
| Happened | Apr 26, 2018 |
| Attack | Hacking |
| Data exposed | Names, Payment cards, Emails, Phone numbers, Addresses |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Macy'soag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Macy'satg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Macy'sjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2018 data breach report: Macysin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Macy'smaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Jul 1, 2018 | 3,564 |
| California AGresidents of CA | Jul 2, 2018 | |
| Maine AGresidents of ME | Jul 2, 2018 | 299 |
| Oregon DOJresidents of OR | Jul 3, 2018 | 162,507 |
| Indiana AGresidents of IN | Jul 3, 2018 | 2,075 |
Other breaches at Macy's
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Nov 14, 2019Nov 14, 20196 years agoHacking | Nov 14, 20196 years ago | Hacking | Tech | Confirmed | Unknown |
History of this record
- 2026-09-25 · data_types: [] to ["names","payment-card","emails","phone","addresses"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 162507 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2018-07-02 to 2018-07-01 · backfill source
- 2026-09-25 · discovered: empty to 2018-06-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.