Macy's Data Breach 2019

[David H. Lipman]

Macy's Data Breach 2019: How to Check If You Have Been Affected

"Macy's has written to customers that have been affected by a data breach, just ahead of its Q3 earnings and the Black Friday shopping season.

In a letter dated November 14, the company said: "On behalf of Macy's, we are writing to inform you about a recent incident involving unauthorized access to personal information about you on macys.com."

The letter goes on to say that on October 15, 2019, the company was made aware of a suspicious connection between the domain macys.com and another website.

"Based on our investigation, we believe that on October 7, 2019 an unauthorized third party added unauthorized computer code to two pages on macys.com. The unauthorized code was highly specific and only allowed the third party to capture information submitted by customers on the following two macys.com pages," the company said. These were the checkout page and the wallet page.

What Information Was Stolen From Macy's?

While the code was removed on October 15, 2019, according to the company, the following information potentially could have been accessed:

• First Name
• Last Name
• Address
• City
• State
• Zip
• Phone Number
• Email Address
• Payment Card Number
• Payment Card Security Code
• Payment Card Month/Year of Expiration

Macy's has confirmed that "customers checking out or interacting with the My Account wallet page on a mobile device or on the macys.com mobile application" were not affected. "