According to Neiman Marcus, data potentially exposed included not only personal contact information but also usernames, passwords, and payment card numbers and expiration dates, as well as security questions.
Neiman Marcus prompted customers to reset their passwords and said it was working with law enforcement agencies and cybersecurity firm Mandiant to investigate the breach.