Macy's customer profiles hacked

Macy's warned customers of its e-commerce sites that their data has been breached. The security incident involved "unauthorized access to personal information" from late April to mid-June, according to the notice from Michael Gatio, president of Macy's credit and customer services. Macy's did not specify how many customer accounts were affected. The retailer's cyberthreat alert tools identified suspicious logins to "certain" customer profiles on June 11. The company said an unauthorized third party gained access to customers' first and last names, full addresses, phone numbers, email addresses, birthdays and credit card numbers with expiration dates. After opening an investigation, Macy's blocked those customers' accounts until they could update their passwords.
