Cybercriminals also stole usernames, passwords and security questions and answers associated with Neiman Marcus online accounts.

No active Neiman Marcus-brandedcredit cardswere affected.

The cybersecurity firm Mandiant has been hired to investigate.