The Neiman Marcus Group, LLC

Companies / web services

Aliases / services: Neiman Marcus / ニーマン・マーカス / The Neiman Marcus Group, LLC
Official website: https://www.neimanmarcus.com/

Sources identifying the operating company

https://oag.ca.gov/ecrime/databreach/reports/sb24-545944

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Neiman Marcus online accounts

Response status: Not listed
Response information checked: 2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Unauthorized access in May 2020 involved contacts, payment-card numbers and expiration dates, virtual gift-card numbers and login information. Card CVVs and gift-card PINs were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Change passwords reused or closely duplicated elsewhere and report unauthorized statement entries to the issuer. Affected accounts were required to reset passwords at the time.

Official service URL

https://www.neimanmarcus.com/

Source URLs

Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-545944Service and operation documentation
2021-09-30 official noticehttps://oag.ca.gov/system/files/NMG%20-%20Email%20Notification%20Letter.pdfService and operation documentation

Related official sources

Official operator evidenceOfficial information directoryIdentifies The Neiman Marcus Group, LLC and the relevant scope.
2021-09-30 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.