Neiman Marcus Group Ltd. was given two weeks to answer 10 sets of questions from Florida Attorney General Pam Bondi about its customer data security after disclosing it was hacked during the holiday shopping season.
A letter to Anthony Jannotta, an attorney for the Dallas-based department store chain, seeks details of how hackers gained access to the company’s computer systems and when the retailer learned of the incursion.
“Prior to this incident, what measures were employed to protect against the unauthorized dissemination of consumer financial information?” Senior Assistant Attorney General Patrice Malloy asked in the Jan. 15 letter, giving the company two weeks to respond.
Neiman Marcus was the second U.S. retailer to announce a customer data-security breach that occurred during the holiday rush. Minneapolis-based Target Corp. has said as many as 110 million customer accounts were compromised by the theft of information including names, home and e-mail addresses and credit and debit card data.
Target and Neiman Marcus are subjects of multistate investigations by officials including Illinois Attorney General Lisa Madigan and Connecticut Attorney General George Jepsen.
“Our investigation into this criminal cyber-security intrusion is ongoing,” Ginger Reeder, a Neiman Marcus spokeswoman, said yesterday in an e-mail. “We have been in contact with General Bondi’s office and will be responding to her letter as requested.”
Neiman Marcus said it has no evidence that customers’ social security numbers, birth dates and personal identification numbers were stolen in the data breach.
Online customers don’t appear to have been affected by the breach, Dallas-based Neiman Marcus said this week in a statement on its website. The closely held retailer said it will offer free credit-monitoring services to all shoppers who made a credit-card purchase at the company in the last year.
A copy of the Florida attorney general’s letter was provided by Whitney Ray, a spokesman for Bondi. Jannotta is an attorney in the New York office of Dentons USA LLP. He was formerly counsel to Connecticut Governor Dannel Malloy, according to his law firm biography.