Data breaches seem to be inevitable these days. If you've ever swiped your card at a store or ordered anything online, you're risking your data being stolen.
Major retailers have been hit with data breaches since more information has gone up online and more computers have been used. Around Christmas 2013, Target was hit with a major data breach, exposing about 70 million records. Michael's also acknowledged a breach, and most recently Walmart leaked the data of 1.3 million shoppers.
Now, Macy's is reporting an exposure involving its online shopping network.
For about two months, until the middle of June, customer records were being used at its online site. Macy's said the login data was gathered from somewhere other than Macy's.
From April 26 to June 12, the third party was using valid usernames and passwords to gain access to the customers' accounts. Macy's says unauthorized parties were able to access customer names, addresses, phone numbers, email addresses, birth dates and debit or credit card numbers with expiration dates. Macy's said CVV numbers on the backs of credit cards were safe, as were Social Security numbers.
On June 12, Macy's blocked the profiles that seemed to be breached by the third party.
This is not the first time Macy's has compromised customer data. In February 2010, customer information was found in a garbage bin. Also, in 2008, 4,100 Macy's customers were affected when Macy's Card Services were breached.
What you should do
Macy's sent out letters to affected customers with instructions. If you haven't received an email, check your junk mail folders to see if it got routed there.
Macy's is advising everybody to change their passwords to protect their accounts. Also, keep an eye on any activity on the Macy's site. If you reuse passwords - never a good idea - check all your accounts for any suspicious use.
Better yet, get yourself a good password manager. At the Kim Komando Show, we use our sponsor LastPass. With LastPass, you only need one master password, and it can generate secure passwords for all your other needs. Click or tap here now to get a free 30-day trial account with LastPass.