Neiman Marcus CEO says PIN data not accessed in card breach

Share this article:
PIN data is not at risk because the retailer does not use PIN pads in its stores.
PIN data is not at risk because the retailer does not use PIN pads in its stores.

Malware found on the payment systems of Neiman Marcus led to the compromise of card data for an undisclosed number of shoppers, but PIN data is not at risk because the retailer does not use PIN pads in its stores, the company CEO said on Thursday.

Customers impacted in the breach are being notified, Karen Katz, CEO with Neiman Marcus, said in a Thursday statement emailed to SCMagazine.com and posted on the retailer's website.

SCMagazine.com inquired on Thursday as to the number of cards compromised in the data theft and asked for additional details on the malware infection of the company's payment systems, but Ginger Reeder, vice president of communications with Neiman Marcus, said that criminal and forensic investigations are still ongoing.

“Actions we have taken include working with federal law enforcement, disabling the malware we have found, enhancing our security tools, and assessing and reinforcing our related payment card systems in light of this new threat,” Katz wrote.

Neiman was informed in mid-December 2013 of unauthorized payment card activity linked to customer purchases in its stores, according to the statement, which adds that a forensic investigator confirmed on Jan. 1 that a “cyber-security intrusion” had occurred.

Neiman Marcus is offering one free year of credit monitoring services to any customer who shopped with the retailer in the past year. More details about that program are scheduled to be made available on Jan. 24.

A class-action complaint was filed against Neiman Marcus on Jan. 13, which seeks equitable relief for all impacted individuals.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

NIST finalizes cloud computing roadmap

NIST finalizes cloud computing roadmap

The NIST architecture is designed to accelerate the adoption of cloud computing.

Chinese MitM attack targets iCloud users

Chinese MitM attack targets iCloud users

The attack used a false certificate to trick iCloud users into handing over personal data and login credentials. With an attack of this size, some experts and researchers believe the ...

EPIC: driver data shared via V2V technology needs protection

The groups shared comments on V2V communications with the National Highway Traffic Safety Administration.