By Anne D'InnocenzioNEW YORK -- Luxury merchant Neiman Marcus confirmed Saturday that thieves may have stolen customers' credit and debit card information and made unauthorized charges over the holiday season, becoming the second retailer in recent weeks to announce it had fallen victim to a cyber-security attack.
The hacking, coming weeks after Target Corp. (TGT) revealed its own breach, underscores the increasing challenges that merchants have in thwarting security breaches.
Ginger Reeder, spokeswoman for Dallas-based Neiman Marcus Group Ltd., said in an email Saturday that the retailer had been notified in mid-December by its credit card processor about potentially unauthorized payment activity following customer purchases at stores. On Jan. 1, a forensics firm confirmed evidence that the upscale retailer was a victim of a criminal cyber-security intrusion and that some customers' cards were possibly compromised as a result.
Reeder says the retailer, which operates more than 40 upscale stores and clearance stores, is working with the Secret Service. She wouldn't estimate how many customers may be affected but said the merchant was notifying customers whose cards it knew were used fraudulently.
"We have begun to contain the intrusion and have taken significant steps to further enhance information security," Reeder said in an email.
The revelations come as Target disclosed Friday that its massive data theft was significantly more extensive and affected millions more shoppers than the company announced in December. The nation's second largest discounter said hackers stole personal information -- including names, phone numbers, email and mailing addresses -- from as many as 70 million customers as part of a data breach it discovered last month.