The retailer said that, for a one-week period in October, unauthorized computer code added to macys.com allowed a hacker to capture credit card data and other information entered on the site’s online checkout and wallet pages.
Macy’s stock fell by 11% on the day of the disclosure, its biggest decline in three months, as experts warned the breach could scare shoppers during the crucial holiday season.