People search Neiman Marcus data breach timeline because millions of customers entrust payment and identity data to everyday transactions. BreachHistory indexes 7 Neiman Marcus-linked incidents, with headline counts up to 4.6M+ in catalog rows. This page maps every attested event through 2026 with internal links to canonical records.
Why Neiman Marcus breach history matters
Neiman Marcus operates in Retail. Across indexed rows, recurring themes include credential theft and social engineering. Understanding the chronological pattern helps security teams, customers, and regulators separate confirmed disclosures from forum marketing.
Full timeline through 2026
2024 — 64k customers
Cataloged incident. Sp1d3r accessed Neiman Marcus Snowflake database April–May 2024. Luxury retailer confirmed 64,472 customers affected. Names, contact info, dates of birth, gift card numbers (no PINs). Part of Snowflake campaign. Exposed categories include Names, contact information, dates of birth, gift card numbers. BreachHistory cites approximately 64K+ affected records in this row. See the neiman-marcus2024 and canonical BreachHistory entry.
2021 — 4.6M (May 2020 breach)
Cataloged incident. Unauthorized party obtained credentials and accessed online accounts. Discovered September 2021. Usernames, passwords, security Q&A, names, contact info, payment card numbers (no CVV), gift card numbers. 3.1M payment/gift cards affected; 85%+ expired. Mandiant forensic investigation. Exposed categories include Usernames, passwords, security Q&A, names, contact info, payment card numbers, gift card numbers. BreachHistory cites approximately 4.6M+ affected records in this row. See the neiman-marcus2021 and canonical BreachHistory entry.
2017 — — Neiman Marcus: On or about January 17, 2017, unauthorized…
Cataloged incident. On or about January 17, 2017, unauthorized individuals began attempting to access our InCircle, Neiman Marcus, Bergdorf Goodman, Last Call, CUSP, and Horchow websites (collectively the NMB websites) by trying various companies (not associated with NMG websites), in which user login names and passwords were stolen. The intruders were able to access customers' names, basic contact information, email addresses, purchase history, but only the last four digits of payment card numbers. For InCircle Exposed categories include Personal information. No attested victim count is published for this row yet. See the neiman-marcus2017 and canonical BreachHistory entry.
2016 — — Neiman Marcus: Neiman Marcus has notified individuals of a data…
Cataloged incident. Neiman Marcus has notified individuals of a data breach when the company discovered unauthorized access to online accounts on or around December 26, 2015.The information compromised included usernames, passwords, names, mailing addresses, phone numbers, last four digits of payment card along with purchase histories. The firm suspects the attacker obtained the login credentials from large breaches at other companies where login names and passwords were stolen in order to gain unauthorized access Exposed categories include Personal information. BreachHistory cites approximately 5K+ affected records in this row. See the neiman-marcus2016 and canonical BreachHistory entry.
2014 — — Neiman Marcus: Neiman Marcus confirmed that its database of…
Cataloged incident. Neiman Marcus confirmed that its database of customer information was hacked last month, around mid-December, the same time that Target stores were targeted. The case is similar to the Target case in that only retail shoppers were affected, no online shoppers were affected. The cause, size and duration of the attack are not yet known and should start to be revealed once a third party investigation is completed. The company is also working with the Secret Service, which is customary in these type Exposed categories include Personal information. BreachHistory cites approximately 1.1M+ affected records in this row. See the neiman-marcus2014 and canonical BreachHistory entry.
2014 — — Neiman Marcus: Hacked, 1.1M records
Cataloged incident. Data breach reported to Have I Been Pwned or similar sources. Further technical details not publicly disclosed. BreachHistory cites approximately 1.1M+ affected records in this row. See the neiman-marcusu and canonical BreachHistory entry.
2007 — — Neiman Marcus: Computer equipment was stolen containing files with…
Cataloged incident. Computer equipment was stolen containing files with sensitive information including name, address, Social Security number, date of birth, period of employment and salary information of retailer Neiman Marcus Group's current and former employees and their spouses. Exposed categories include Personal information. BreachHistory cites approximately 160K+ affected records in this row. See the neiman-marcus2007 and canonical BreachHistory entry.
Patterns and analysis
- Credential theft and social engineering — appears across multiple Neiman Marcus catalog entries; prioritize controls that address this class of failure.
- Record-count hygiene — BreachHistory indexes actor-cited figures separately from company-confirmed totals; read each row's technicalWriteup before treating counts as fact.
- 2026 monitoring — New disclosures roll into this timeline as they are verified or labeled unverified per catalog policy.
What to do if you may be affected
- Step 1: Enable phishing-resistant MFA on every account tied to this brand.
- Step 2: Use unique passwords and a password manager—breach rows often involve credential reuse.
- Step 3: Monitor official company breach notices and regulator filings, not dark-web downloads.
- Step 4: Use virtual card numbers for online checkout where your bank supports it.
- Step 5: Bookmark the Neiman Marcus company page for new 2026+ disclosures.
Canonical BreachHistory hub
Explore every indexed row: breachhistory.com/neiman-marcus · Latest: neiman-marcus2024.
Sources: BreachHistory catalog (7 rows for Neiman Marcus), company and regulator disclosures cited in individual breach records.