American luxury retailer Neiman Marcus Group (NMG) has published a cyber security report in which it has disclosed a major data breach that directly impacted around 4.6 million consumers. The company told in a press release that they have already started alerting 4.6 million customers regarding their personal credentials associated with online services accounts that may have been accessed by a third party in May 2020. 

According to the organization, the breach took place in the month of May last year. The company got an alert when “an unauthorized party” got access to the personal credentials of some of Neiman Marcus's consumers from their online accounts. 

Following the incident, the company joined hands with law enforcement agencies and will do a further investigation with the cybersecurity company Mandiant. 

As part of the breach, the personal information of the users was stolen including Names, usernames, and passwords of Neiman Marcus online accounts addresses, contact information, Payment card numbers, and expiration dates (although no CVV numbers), Neiman Marcus virtual gift card numbers (without PINs), and security questions of Neiman Marcus online accounts. Around 3.1 million payment and virtual gift cards were compromised. However, around 85 percent of these were out of service or invalid. 

The breach did not affect the customers data of Bergdorf Goodman and Horchow who are a part of the Neiman Marcus Group. Following the incident, the company suggested its customers change passwords of their accounts and report if they experience any weird activity in their system. 

"At Neiman Marcus Group, customers are our top priority," CEO Geoffroy van Raemdonck said in a statement Friday. "We are working hard to support our customers and answer questions about their online accounts. We will continue to take actions to enhance our system security and safeguard information."