Subscribe for insights, tips, and money-saving offers to help protect your identity and your finances from fraud.

By entering my email and clicking the "Subscribe" button, I expressly consent to receiving informational and marketing emails, including the Cyber News by Identity Champion blog, from A3 Labs LLC and its parents and subsidiaries. You will receive an email from us within an hour asking you to confirm your subscription.

Neiman Marcus Data Breach: What You Need to Know

October 15, 2021 - by annesophie.bousset@a3ventures.co

Neiman Marcus Group (NMG) recently confirmed in a press release that millions of customer online accounts were accessed without authorization. Read on to learn what happened, what it may mean for the risk of identity theft, and steps you can take to protect yourself.

What’s Known

Date of Data Breach: May 2020

Type of compromised data: The personal information for affected customers varied and may have included name and contact information; payment card number and expiration date (without CVV number);1 Neiman Marcus virtual gift card number (without PIN);1 and the username, password, and security questions and answers associated with Neiman Marcus online accounts

Number of users affected: 4.6 million

Why This Matters

Combined with other information on the dark web, personal information like name and security question answers can be used to commit identity theft. Not only can that damage your credit score, but dealing with the fallout can be costly, time-consuming, and stressful. On average, it takes 600 hours to restore a stolen identity.2

Fraudsters often sell or trade stolen information online. Timelines can vary, so don’t let your guard down if you don’t notice any illicit activity immediately following a breach. Exposed personal information may be used to commit identity fraud in the months or years following a data breach.

How to Protect Yourself

  1. Monitor your payment card. Look closely for any unexpected charges on the payment card(s) you used for purchases at Neiman Marcus, and contact your payment card company or financial institution about any suspicious charges.
  1. Check your credit report.3 Request a copy of your credit report (included in all Identity Champion plans)4 and pay close attention to anything you don’t recognize. Make sure you check regularly since identity theft does not necessarily happen immediately after a data breach. Identity Champion subscribers can contact Member Support for assistance if they find anything suspicious.
  1. Lock your credit file. Locking your credit file prevents potential lenders from accessing your credit file, limiting who can open new lines of credit in your name. (Experian Credit Lock is included in Identity Champion Complete.) 

Pro Tip: If you’re a AAA Member, activate Identity Champion Basic, included in your AAA Membership.4 Identity Champion’s Internet & Dark Web Monitoring works 24/7, scouring the internet and dark web for your personal information. We will notify you if it finds your personal information on a website known for selling or sharing stolen data.

Not a Member? You can get an Identity Champion Protect or Complete plan with a new AAA Membership. Click here to learn more.


1 More than 85% of affected payment and virtual gift cards are expired or invalid.
2 Source: 2021 SANS Institute - Identity Theft
3 You have the right to a free credit report from AnnualCreditReport.com or (877) 322-8228, the ONLY authorized source under Federal law.
4 Activation required. Sign up for Identity Champion Basic and enter your AAA Member number during enrollment to activate monitoring.

Unless stated otherwise, Identity Champion and A3 Labs LLC are not affiliated with any of the companies mentioned in this blog post.

A3 Labs LLC makes no representations as to the accuracy or completeness of the information contained in this or any blog post on the Identity Champion website.