Nordstrom, Inc. nordstrom.com Nordstrom data breach 2018: what happened and what to do
On October 9, 2018, a contract worker improperly handled Nordstrom employee data. Nordstrom said no customer data was affected. The data could include names, Social Security numbers, bank account details, salary and dates of birth.
View all 13,115 breaches- Breach date
- 9 Oct 2018
- Made public
- 5 Nov 2018
- Data exposed
- Names, Social security numbers, Pay card numbers, Bank account numbers, Insurance provider information, Salary information, Dates of birth, Physical addresses, Phone numbers
- Last updated
What happened
Nordstrom's Information Security team found the incident on October 9, 2018. In a notice dated November 5, 2018, the company said a contract worker had improperly handled some employee data. It told law enforcement and started an investigation. The worker no longer has access to Nordstrom systems.
This was not a customer breach. Nordstrom said no customer data was involved. The people affected were current and former employees. The company did not publish a total in its notice, and the number of residents reported by a single state is not the total.
What was exposed
According to the notice, the employee information could include:
- Name, address and phone number
- Social Security number and date of birth
- Pay card number, plus checking account and routing numbers
- Insurance provider information
- Salary information
That mix is what identity thieves look for. A Social Security number with a date of birth and an address is enough to apply for credit in someone's name. Bank details can be used in payroll and direct-deposit scams, and a phone number and employer are enough to make a phishing message look believable.
Nordstrom's response
Nordstrom said it had no evidence the data was shared or used inappropriately. It offered affected employees 24 months of identity repair and credit monitoring with fraud alerts through AllClear ID, and said it was adding measures to prevent a repeat.
What to do if you were in it
- 1
Use the credit monitoring if you got a letter
If you worked at Nordstrom in 2018, the notice came with a code for 24 months of free monitoring and identity repair. Check whether the enrollment window is still open.
- 2
Freeze your credit at all three bureaus
Place a free freeze at Equifax, Experian and TransUnion, separately at each. It blocks most new accounts opened in your name, and you can lift it when you apply for credit yourself.
- 3
Watch your bank and payroll accounts
Bank account and pay card numbers were on the list. Check statements for deposits or withdrawals you don't recognize, and tell your bank if payroll details change without you asking.
- 4
Expect phishing that knows where you worked
Be careful with messages about pay, benefits or taxes. Go to the company or bank site yourself instead of clicking a link.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the Nordstrom data breach?
Only current and former Nordstrom employees were affected, according to the company's notice. Customers were not. Affected employees were notified by Nordstrom.
What was exposed in the Nordstrom data breach?
Names, Social Security numbers, pay card and bank account numbers, insurance provider information, salary, dates of birth, addresses and phone numbers could be involved.
Should I freeze my credit?
If you were an employee, yes. A Social Security number was in the data, and a freeze is free at Equifax, Experian and TransUnion.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
