People search Nordstrom data breach timeline because the brand sits on billions of accounts, credentials, and cloud workloads. BreachHistory indexes 4 Nordstrom-linked incidents, with headline counts up to 107K+ in catalog rows. This page maps every attested event through 2026 with internal links to canonical records.
Why Nordstrom breach history matters
Nordstrom operates in Technology (United States). Across indexed rows, recurring themes include third-party and supply-chain exposure. Understanding the chronological pattern helps security teams, customers, and regulators separate confirmed disclosures from forum marketing.
Full timeline through 2026
2024 — — Employee data
Cataloged incident. Third-party breach. Employee data. Exposed categories include Names, emails, addresses, and other PII. No attested victim count is published for this row yet. See the nordstrom2024 and canonical BreachHistory entry.
2018 — — Nordstrom: Information on this security breach is provided by…
Cataloged incident. Information on this security breach is provided by the Office of the Indiana Attorney General Exposed categories include Personal information. BreachHistory cites approximately 107K+ affected records in this row. See the nordstrom2018 and canonical BreachHistory entry.
2013 — — Nordstrom: Six skimmers were found on registers in one…
Cataloged incident. Six skimmers were found on registers in one Nordstrom store in Aventura. Six people were seen tending to the devices on the afternoon of October 5. They came in groups of three and distracted sales people while tampering with the registers, twice. Skimmers and tiny cameras were installed to collect credit card information. The information can be used to make fraudulent credit cards. Exposed categories include Personal information. No attested victim count is published for this row yet. See the nordstrom2013 and canonical BreachHistory entry.
2012 — — Nordstrom: A total of 2,457 Nordstrom fsb customers in…
Cataloged incident. A total of 2,457 Nordstrom fsb customers in California were affected by a mailing error caused by an administrative error. Cardholder statements, replacement credit cards, or other correspondence were mistakenly sent to addresses other than those of intended cardholders. The issue was discovered on June 7 and was the result of an attempt to reformat addresses to U.S. Postal Service standards. Those who were affected were notified in June and July. Exposed categories include Personal information. BreachHistory cites approximately 2K+ affected records in this row. See the nordstrom2012 and canonical BreachHistory entry.
Patterns and analysis
- Third-party and supply-chain exposure — appears across multiple Nordstrom catalog entries; prioritize controls that address this class of failure.
- Record-count hygiene — BreachHistory indexes actor-cited figures separately from company-confirmed totals; read each row's technicalWriteup before treating counts as fact.
- 2026 monitoring — New disclosures roll into this timeline as they are verified or labeled unverified per catalog policy.
What to do if you may be affected
- Step 1: Enable phishing-resistant MFA on every account tied to this brand.
- Step 2: Use unique passwords and a password manager—breach rows often involve credential reuse.
- Step 3: Monitor official company breach notices and regulator filings, not dark-web downloads.
- Step 4: Review OAuth app permissions and revoke unused third-party integrations.
- Step 5: Bookmark the Nordstrom company page for new 2026+ disclosures.
Canonical BreachHistory hub
Explore every indexed row: breachhistory.com/nordstrom · Latest: nordstrom2024.
Sources: BreachHistory catalog (4 rows for Nordstrom), company and regulator disclosures cited in individual breach records.