Macy’s says hackers accessed customer credit card information


Macy’s Inc. is the latest major company to fall victim to a data breach, as a letter emailed by the company to customers confirmed that a third party accessed online customer accounts between April and June.

The third party, not identified by the company, was able to access consumer information including names, phone numbers, addresses and credit and debit card numbers, Macy’s said. Macy’s does not keep Social Security numbers or CVV numbers saved on customers profiles, the company said, meaning that information was not able to be accessed.

Valid customer login credentials were used in the breach, but it is believed the hackers obtained the user names and passwords from a source that is not Macy’s, the company said in the letter. Macy’s did not say how many profiles were accessed.

According to the letter, Macy’s first noticed suspicious login activity from several customer profiles on June 11 and, following an investigation, blocked all online profiles displaying suspicious activity the following day. It is believed the breach began on April 26.

The company said it reported all affected credit and debit cards to the appropriate companies and has strengthened its security protocols for customer logins.

The Cincinnati-based company operates 690 Macy’s and Bloomingdale’s department stores, with 23 locations in Georgia. Macy’s joins a list of other major corporations which have seen consumer data accessed by unauthorized third parties.

Two Atlanta-based companies, Home Depot and Equifax, have both been breached in recent years. In 2014, a breach of Home Depot’s payment systems exposed the credit card information of 56 million customers throughout North America.

Last year, credit reporting agency Equifax reported it had been hacked. The breach compromised the personal data, including Social Security numbers and credit card information, of 143 million Americans.

In other business news:



Reader Comments ...


Next Up in Business

Atlanta’s Inspire Brands buys Sonic 
Atlanta’s Inspire Brands buys Sonic 

Atlanta-based Inspire Brands is buying Sonic in a $2.3 billion deal that will dramatically boost its size and reach, the companies announced Tuesday morning. Sonic, which operates a chain of 3,500 restaurants with hundreds of franchisees, has about $4.4 billion in revenues – more than half the 7.6 billion in sales racked up by Inspire. In a statement...
Shake Shack opens at Hartsfield-Jackson
Shake Shack opens at Hartsfield-Jackson

A Shake Shack has opened at Hartsfield-Jackson International Airport. The burger eatery opened Tuesday on Concourse A near gate 28, and is operated by a joint venture of Atlanta-based Concessions International and H&H Hospitality. Shake Shack started in New York and gained a cult following, then expanded to other locations around the country...
Massive Georgia nuclear project scores a partial vote to continue
Massive Georgia nuclear project scores a partial vote to continue

An organization that represent city utilities in Georgia voted Monday to keep the nuclear power expansion of Plant Vogtle alive, despite continued cost overruns and delays. But Vogtle’s future isn’t yet settled, even with the unanimous vote for approval by the board of the Municipal Electric Authority of Georgia.  As of Monday afternoon...
Air France to fly A380 super jumbo jet from Atlanta
Air France to fly A380 super jumbo jet from Atlanta

Air France plans to begin flying the super jumbo Airbus A380 jet from Atlanta to Paris starting next spring. As of March 31, 2019, Air France will operate one of its two daily flights from Hartsfield-Jackson International to Paris-Charles de Gaulle on its 516-passenger A380. Air France, a joint venture partner of Atlanta-based Delta Air Lines...
More Stories