Macy's, Inc.

The Washington State Office of the Attorney General reported a data breach involving Macy's Inc. on November 14, 2019. The breach, discovered on October 15, 2019, occurred due to unauthorized computer code added to two webpages on October 7, 2019, potentially affecting 3,810 Washington residents and exposing personal information including names, addresses, and payment card details.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10517

TPRM report: https://www.rankiteo.com/company/macy

"id": "mac420080525",
"linkid": "macy",
"type": "Breach",
"date": "10/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3810,
                        'industry': 'Retail',
                        'location': 'Washington',
                        'name': "Macy's Inc.",
                        'type': 'Retail'}],
 'attack_vector': 'Unauthorized computer code',
 'data_breach': {'number_of_records_exposed': 3810,
                 'personally_identifiable_information': ['names', 'addresses'],
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'payment card details']},
 'date_detected': '2019-10-15',
 'date_publicly_disclosed': '2019-11-14',
 'description': 'The Washington State Office of the Attorney General reported '
                "a data breach involving Macy's Inc. on November 14, 2019. The "
                'breach, discovered on October 15, 2019, occurred due to '
                'unauthorized computer code added to two webpages on October '
                '7, 2019, potentially affecting 3,810 Washington residents and '
                'exposing personal information including names, addresses, and '
                'payment card details.',
 'impact': {'data_compromised': ['names', 'addresses', 'payment card details']},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'title': "Macy's Inc. Data Breach",
 'type': 'Data Breach'}