Neiman Marcus data breach went on for much longer than believed

[Chris Smith]

The security breach at Neiman Marcus, which wasn’t acknowledged officially until a few days ago, went on for much longer than initially believed, the New York Times reports. While the retail store is yet to confirm to the public when the system was first hacked, it told credit card companies in a conference call on Monday that it all started in mid-July and that it wasn't fully contained until Sunday, unnamed sources revealed. In its initial disclosure to the public, Neiman Marcus said it first learned about the breach in mid-December although it only decided to reveal it in January. In its notes to customers, the retailer said that key personal data, including Social Security numbers and birth dates, were not compromised. Furthermore, the company said that it doesn’t collect card PINs in its stores, and that it had “no knowledge of any connection” between the Target hack and the one it suffered. The retail chain is yet to reveal how many credit and debit cards were compromised during the attack.

Continue reading...

Via BRG - Boy Genius Report