Free tools Windows power users keep installed
One-click scans. No signup required.
More than 31 million Neiman Marcus customer email addresses were reportedly found in exposed data—but that is not the same as saying 31 million people were officially confirmed as breach victims. Neiman Marcus initially reported that 64,472 people were affected and notified customers on June 24, 2024. The larger figure came later from Troy Hunt, founder of Have I Been Pwned, who analyzed the stolen data.
What happened in the Neiman Marcus breach?
Neiman Marcus detected unauthorized access to a database environment in May 2024. Its filing with Maine regulators described an external hacking incident that occurred between April 14 and May 24, 2024, with the breach discovered on May 24.
As an Amazon Associate I earn from qualifying purchases.
The company’s regulatory filing listed 64,472 affected people, including 184 Maine residents. Neiman Marcus said it notified affected customers on June 24, 2024. The affected retail brands included Neiman Marcus and Bergdorf Goodman.
In July 2024, Troy Hunt reported finding more than 31 million Neiman Marcus customer email addresses in the exposed data. That analysis explains the widely reported “31 million” figure, but it was not an official Neiman Marcus or government count of unique affected individuals.
#1 Best Overall
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
Read the Maine regulatory filing and the report on Hunt’s analysis.
Why are the breach numbers so different?
The two figures measure different things:
| Figure | What it represents |
|---|---|
| 64,472 people | The number Neiman Marcus initially reported as affected and required to receive notice. |
| More than 31 million email addresses | Email-address records that Troy Hunt reportedly found in the exposed dataset. |
| Unique customers | Not independently established by the available evidence. |
An email-address count can include duplicate, historical, inactive, or malformed addresses. It also does not prove that every address belonged to an active customer, that every person received a formal notice, or that every record contained the same information.
A later lawsuit alleged that Neiman Marcus understated the breach’s scope. That is an allegation in litigation, not an adjudicated finding. The precise reason the company’s notification count and the third-party dataset count diverge has not been publicly established.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchRank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What information may have been exposed?
The information varied by person. The official customer notice and later settlement materials identified these categories:
| Information | Evidence and qualification |
|---|---|
| Names | Listed in the customer notice and settlement materials. |
| Email addresses | More than 31 million were reportedly found in the analyzed data. |
| Other contact information | Listed in the customer notice. |
| Dates of birth | Listed in the customer notice and settlement materials. |
| Neiman Marcus or Bergdorf Goodman gift-card numbers | The notice reportedly said PINs were not included. |
| Partial credit-card numbers | Listed in settlement materials. |
| Last four digits of Social Security numbers | Listed in settlement materials. |
These descriptions do not mean every person’s record contained every field, or that every listed item was confirmed to have been viewed or misused. The settlement FAQ describes information that may have been exposed. The official notice did not establish that full payment-card numbers or gift-card PINs were exposed.
See the Massachusetts breach-notification document and the settlement FAQ.
Rank #3
- Embedded Fingerprint Sensor - Advanced embedded fingerprint sensor which facilitates a world-class one-of-a-kind password-less experience. A powerful security chip with state-of-the-art cryptographic algorithms ensures protection of online accounts and passwords.
- Password-less Future - Created with FIDO2 certification, experience a password-less future in an interoperable authentication process and make daily log-in experiences easy, instant, and protective for an advanced and revolutionary style of password-less security. **Note: FIDO2 does not support Mac log-in.
- U2F Backwards Compatibility - Thetis FIDO2 Fingerprint Key is backwards compatible with any and all websites that follow U2F protocols and work side-by-side with the newest Chrome browser and other popular operating systems such as: Windows, MacOS, Linux, and more. Note: Only Enterprise Users using Azure Active Directory can access Windows Hello log-in via Thetis FIDO2 Fingerprint Security Key.
- Multi-layered Authentication - Created with world-renowned HOTP (One Time Password) technology which creates a password-less solution to standard tokens. The leading multi-factored authentication process is with Thetis security key.
- Take It Anywhere - Designed to be small and compact to fit and be taken anywhere: car keys, pocket, purse, etc.
Was this a Snowflake breach?
The Neiman Marcus incident was connected in reporting and litigation to the broader 2024 campaign involving stolen data from Snowflake customer environments. The federal multidistrict litigation identifies Neiman Marcus among the companies involved in the Snowflake-related cases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
That does not justify saying that “Snowflake was hacked and all its customers were breached,” or that Snowflake alone caused the Neiman Marcus incident. Stolen credentials and account-protection issues were central subjects in reporting and litigation, while responsibility among Neiman Marcus, Snowflake, and other parties remained disputed.
The U.S. District Court’s MDL page provides the litigation context.
Rank #4
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How to check whether your email was exposed
You can check an email address at Have I Been Pwned, the service associated with Troy Hunt’s analysis. A match means the address appears in a breach dataset held by the service. It does not prove that someone currently controls your mailbox or is actively abusing the address.
Use the official site rather than an unsolicited “dark-web scan” link. Do not enter passwords into a breach-checking page.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →What affected customers should do now
- Change reused passwords. If you used a Neiman Marcus password elsewhere, change it everywhere. Use a unique password for every account, ideally stored in a password manager.
- Turn on multifactor authentication. Prefer an authenticator app or security key over SMS when practical, especially for email, banking, shopping, and social-media accounts.
- Expect targeted phishing. Watch for messages about orders, refunds, gift-card balances, rewards, payment updates, account verification, or settlement payments. Go directly to a known retailer website instead of clicking unexpected links.
- Protect gift cards and payment accounts. Review gift-card balances and account transactions. Contact Neiman Marcus or your card issuer through independently verified channels if you see suspicious activity.
- Never disclose authentication codes. A legitimate company will not need an unexpected caller or email recipient to provide a one-time code, gift-card PIN, or full card number.
- Consider credit monitoring based on the data involved. It may be useful if your notice indicates exposure of Social Security-number fragments or financial information, but it cannot remove an email address from leaked data or prevent phishing.
Can you still file a Neiman Marcus breach settlement claim?
The settlement established a $3.5 million fund. The official settlement website states that the deadline to submit a claim was October 8, 2025. That deadline has passed as of September 2026, so readers should not be told that new initial claims are still open.
Best Value
- Passwordless Login with Fingerprint Security: imKey Pass S6 is a FIDO2-certified hardware security key designed for passwordless authentication. Simply plug in the device and verify with your fingerprint to securely sign in to supported services. This physical passkey protects your accounts from phishing, password leaks, and unauthorized access.
- Strong Two-Factor Authentication (2FA) Protection: Supports FIDO2 and FIDO U2F protocols, allowing you to enable strong hardware-based 2FA on popular platforms including Google, GitHub, Amazon, X and Binance. Replace SMS codes or authenticator apps with a safer hardware login method.
- Fingerprint + PIN Dual Protection: Built-in fingerprint sensor provides fast local identity verification, while an optional PIN adds an additional layer of protection. Even if the device is lost, unauthorized users cannot access your accounts without biometric verification.
- Universal Compatibility with Modern Systems: Works with Windows, macOS, and major browsers including Chrome, Edge, Safari, and Firefox that support WebAuthn and Passkey authentication standards. A single key can secure multiple online accounts and services.
- Compact, Durable & Easy to use: Designed as a portable USB-C security key that easily attaches to your keychain. No battery, no charging, and no software installation required. Just plug in and authenticate with a fingerprint.
The exclusion and objection deadline was September 23, 2025, and the final approval hearing was scheduled for October 23, 2025. A person who submitted a claim should rely on official communications from the settlement administrator for information about that claim. Do not assume eligibility guarantees payment, and do not rely on unofficial settlement websites requesting sensitive information.
Check the official Neiman Marcus settlement website for any current administrator or court updates.
What remains uncertain?
- The exact number of unique people represented by the more than 31 million email addresses.
- Whether all of those addresses belonged to active Neiman Marcus or Bergdorf Goodman customers.
- Which data categories applied to each individual.
- How many records were actually accessed, viewed, or misused.
- Final settlement payment outcomes unless confirmed by a current court or administrator record.
The safest conclusion is precise: Neiman Marcus officially reported 64,472 affected people, while Troy Hunt reported finding more than 31 million customer email addresses in exposed data. Those figures should not be treated as interchangeable.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
