That information includes contact details, payment card numbers, gift card numbers and usernames and passwords, Neiman Marcus said.
Of the 4.6 million customers who may have been affected, “approximately 3.1 million payment and virtual gift cards were affected, more than 85% of which are expired or invalid,” according to a news release.
Neiman Marcus said it has alerted law enforcement and is working with cybsersecurity firm Mandiant to investigate the situation.
“At Neiman Marcus Group, customers are our top priority,” said Geoffroy van Raemdonck, the company’s chief executive officer, in a news release. “We are working hard to support our customers and answer questions about their online accounts. We will continue to take actions to enhance our system security and safeguard information.”
The company said it has no evidence that its subsidiaries Bergdorf Goodman or Horchow were affected.
— CNN Business’ Jordan Valinsky contributed to this report.