UNC5537 accessed Neiman Marcus’s Snowflake database between April and May 2024. Official notification to Maine AGO cited 64,472 individuals; however HIBP analysis identified 31 million customer email addresses in the dataset. Data included names, contact information, dates of birth, and gift card numbers. Threat actor claimed to also hold partial SSNs, transaction records, and millions of gift card numbers. Part of the broader Snowflake campaign.