Neiman Marcus
Disclosed Jun 24, 20242 years ago64,472 affectedUnverified
Neiman Marcus customer data stolen in Snowflake-related attack
Neiman Marcus reported to the Maine Attorney General that a May 2024 breach of a third-party database platform affected 64,472 people, exposing contact details, birth dates, gift card data and some Social Security numbers. Have I Been Pwned later found about 31 million unique email addresses in the stolen data.
What is known
| People affected | 64,472 (as reported by the organization) |
|---|---|
| Disclosed | Jun 24, 2024 |
| Happened | Apr 14, 2024 |
| Attack | Credential stuffing |
| Data exposed | Dates of birth, Emails, IP addresses, Names, Payment cards, Phone numbers, Addresses, Financial, Social Security numbers, Employment |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Snowflake (2024) |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Neiman Marcushaveibeenpwned.com · Aggregator | Aggregator |
| Neiman Marcus says 64,000 affected by breach of Snowflake customer accounttherecord.media · News | News |
| Neiman Marcus data breach: 31 million email addresses found exposedbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 24, 2024 | 64,472 |
| Have I Been Pwnedaccounts in the data | Jul 9, 2024 | 31,152,842 |
Same campaign
Other breaches at Neiman Marcus
| Breach | Affected | ||||
|---|---|---|---|---|---|
| 2013 in-store card breach hit 370,000 cards; USD 1.5M multistate settlementJan 8, 20197 years agoHacking | Jan 8, 20197 years ago | Hacking | Retail | Settled | 370K |
| Criminal cyber-attack on Neiman Marcus systems compromises payment cardsJan 10, 201412 years agoHacking | Jan 10, 201412 years ago | Hacking | Retail | Confirmed | Unknown |
| Pension consultant's stolen computer held data of 160,000 employeesApr 25, 200719 years agoVendor breachUnverified | Apr 25, 200719 years ago | Vendor breach | Retail | Unverified | 160K |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/NeimanMarcus to https://www.bleepingcomputer.com/news/security/neiman-marcus-data-breach-31-million-email-addresses-found-exposed/ · seed source
- 2026-09-25 · campaign: empty to snowflake-2024 · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to retail · seed source
- 2026-09-25 · attack: hacking to credential-stuffing · seed source
- 2026-09-25 · data_types: ["dob","emails","ip-addresses","names","payment-card","phone","addresses","financial"] to ["dob","emails","ip-addresses","names","payment-card","phone","addresses","financial","ssn","employment"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · records: 31152842 to 64472 · seed source
- 2026-09-25 · disclosed: 2024-07-09 to 2024-06-24 · seed source
- 2026-09-25 · summary: In May 2024, the American luxury retailer Neiman Marcus suffered a data breach which was later posted to a popular hacking forum . The data included 31M unique email addresses, names, phone numbers, dates of birth, physical addresses and pa to Neiman Marcus reported to the Maine Attorney General that a May 2024 breach of a third-party database platform affected 64,472 people, exposing contact details, birth dates, gift card data and some Social Security numbers. Have I Been Pwned · seed source
- 2026-09-25 · title: empty to Neiman Marcus customer data stolen in Snowflake-related attack · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.