Neiman Marcus Data Breach Settlements: Payout Status

Who qualifies

• 2013 breach: U.S. residents whose credit or debit card was used at a Neiman Marcus Group store between July 16 and October 30, 2013, while payment-card malware was active. Payments of up to $100 went to valid claimants; the claim window is closed.
• 2024 breach: U.S. residents whose personal information was exposed in the May 2024 Neiman Marcus/Snowflake breach — names, email addresses, dates of birth, gift-card details, and partial credit-card and Social Security numbers.
• For the 2024 settlement, class members could claim up to $2,500 for documented losses (bank fees, communication charges, credit-related expenses) or choose two years of credit monitoring instead. That claim deadline was October 8, 2025.
• A separate 2019 multistate Attorney General settlement of $1.5 million over the 2013 breach was a civil penalty paid to state governments — it was not a consumer payout, and consumers received money only through the Remijas class action.

Neiman Marcus settlement status — what to know now

1. 1

   Both claim windows are closed

   The 2013 card-breach settlement finished distributing checks around 2021, and the 2024 Snowflake-breach claim deadline was October 8, 2025. There is no open Neiman Marcus claim you can file in 2026.

2. 2

   The 2013 breach paid up to $100 per person

   Remijas v. Neiman Marcus resolved the 2013 payment-card malware breach for $1.6 million. After a revised deal won final approval on June 4, 2021, valid claimants received up to $100 each, distributed by Angeion Group. Cardholders who used a card in Neiman Marcus stores during the July–October 2013 window were eligible.

3. 3

   The 2024 Snowflake breach paid documented losses

   The May 2024 breach — tied to the Snowflake cloud platform — was resolved for $3.5 million within the Snowflake MDL in Montana. Class members could claim up to $2,500 for documented losses or two years of credit monitoring. Final approval was granted October 23, 2025.

4. 4

   Keep the two breaches — and the AG penalty — separate

   The 2013 and 2024 breaches are different incidents with different settlements, courts, and websites (NMSettlement.com vs. NMGSettlement.com). And the 2019 $1.5 million multistate Attorney General settlement was paid to states, not to shoppers. Only the Remijas and Snowflake class actions paid consumers.

5. 5

   Don't miss the next breach settlement — ClaimBee alerts you

   Retail and cloud-platform breaches keep producing new settlements, and the notice letters are easy to miss. ClaimBee scans 2,000+ cases, matches breaches to your profile, and tracks every deadline so you file the next one on time.

Frequently asked questions

Sources and official records

Every figure and date on this page was taken from the primary records below — court dockets, agency releases, and the settlement administrator's own notices. Payout averages we describe as averages are calculated from the official totals, not reported per-person estimates.

• CourtListener — In Re: Snowflake, Inc., Data Security Breach Litigation, MDL No. 2:24-md-03126 (D. Mont.), where the 2024 Neiman Marcus breach cases were consolidated
• CourtListener — Remijas v. The Neiman Marcus Group, LLC, No. 1:14-cv-01735 (N.D. Ill.), the 2013 payment-card breach case behind the earlier $1.6 million settlement