Skip to content
Start with Identity
Join free
Identity breach database · 2024 · Stolen credentials

Neiman Marcus customer data stolen from its Snowflake account

Neiman Marcus notified 64,472 people in June 2024 that names, contact details, dates of birth and gift card numbers were taken from a third-party cloud database between April and May 2024, and confirmed to press that it was its Snowflake account. The data had been advertised for sale by the same actors behind the wider Snowflake campaign.

Victim
Neiman Marcus Group
Industry
Retail and e-commerce
Country
United States
Intrusion began
Apr 2024
First disclosed
Jun 24, 2024
Actor
Financially motivated
Initial access
Stolen credentials
Identity control that failed
Authentication
MFA
Not enforced on the abused account
Abused identity
Human account
Records affected
64,472 (People notified, per the company's filing with the Maine attorney general. Press later reported the stolen data contained far more email addresses.)
Disclosed cost
Not disclosed

The identity lesson

Same failure as the wider Snowflake campaign: an account reachable from anywhere with a stolen password and no second factor.

Go deeper on SWI

Sources

  1. Neiman Marcus confirms data breach, claims its Snowflake account was hacked, TechRadar, Jun 25, 2024

Record verified Oct 31, 2026 against the sources above. Corrections: contact us.

Related incidents

Cite this record

SWI Community Team. (2026). Neiman Marcus customer data stolen from its Snowflake account. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2024-neiman-marcus-snowflake-account/

Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.