F500 Consumer Goods & Food · General Merchandisers · Data breach
Macy's
Headline
Macy's has no confirmed 2024 data breach; its 2024 disclosure was that a single employee had concealed about $151 million of delivery expenses from late 2021 through Q3 2024, which is an internal controls failure…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Macy's has no confirmed 2024 data breach; its 2024 disclosure was that a single employee had concealed about $151 million of delivery expenses from late 2021 through Q3 2024, which is an internal controls failure rather than a data one but speaks to oversight. Macy's also operates a large private-label credit programme - cross-ref the Synchrony row in Credit Card Companies for who actually holds a store card and why disputes go to the wrong entity.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
NO CONFIRMED 2024 DATA BREACH: Macy's 2024 disclosure was an ACCOUNTING matter, not a cybersecurity incident. An independent investigation found that a single employee responsible for small-package delivery expense accounting intentionally made erroneous accrual entries to hide approximately $151 million of cumulative delivery expenses from Q4 2021 through Q3 2024; Macy's said there was no material impact on previously filed financial statements and no impact on net cash flows, inventories or vendor payments. No customer-data exposure was disclosed.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy macys.com/customer-service/policies/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service macys.com/customer-service/policies/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.