PHP Vulnerability Responses by Company

Nordstrom, Inc.

Companies / web services
Aliases / services
ノードストローム / Nordstrom, Inc.
Official website
https://www.nordstrom.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

current and former employee information

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

On October 9, 2018 a contractor improperly handled employee information, potentially including payroll, bank and Social Security details. Customer data was not affected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review statements and credit reports and report unauthorized transactions to your financial institution. The historical 24-month monitoring offer is not a new enrollment invitation.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/system/files/Nordstrom%20-%20Individual%20Notification%20Letter_0.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Nordstrom, Inc. and the relevant scope.
  2. 2018-11-05 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments