Skip to content

Neiman Marcus Group

Disclosed Sep 30, 20214 years ago4,354,346 affectedConfirmed

Official notice

What is known

People affected4,354,346 (as reported by the organization)
DisclosedSep 30, 2021
DiscoveredSep 9, 2021
HappenedMay 2, 2020
AttackHacking
Data exposedNames, Credentials and tokens
SectorOther · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Neiman Marcus Groupoag.ca.gov · Official notice
Washington Attorney General breach notice: Neiman Marcus Groupatg.wa.gov · Official notice
Notice letter filed with the Delaware DOJ: Neiman Marcus Groupattorneygeneral.delaware.gov · Official notice
Oregon DOJ breach notice: Neiman Marcus Groupjustice.oregon.gov · Official notice
Indiana Attorney General 2021 data breach report: Neiman Marcus Groupin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CASep 30, 2021
Washington AGresidents of WASep 30, 202167,410
Delaware DOJresidents of DESep 30, 202130,022
Oregon DOJresidents of ORSep 30, 20214,354,346
Indiana AGresidents of INSep 30, 202131,992

Other breaches at Neiman Marcus Group

BreachAffected
Disclosed Jun 24, 2024Jun 24, 20242 years agoHackingUnknown
Disclosed Jan 29, 2016Jan 29, 201610 years ago6,494
Disclosed Jan 25, 2014Jan 25, 201412 years agoUnknown
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/Data-Breach-Year-to-date-Report-2021-1.pdf · backfill source
  • 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 4354346 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2021-09-09 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Neiman Marcus Group

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.