Archived Fraud Alerts

2016

4/16/2016
Customer Alert: Email Phishing Scheme Spoofing the Trunk Club Email Domain with Reference to a Google Doc

We have recently learned of a phishing email received by a small number of Trunk Club clients that appeared to be from a Trunk Club employee.

Please be aware that Trunk Club is not associated with the content of this email in any way.

The subject line of the email is "I sent you a folder via GoogleDoc" and instructs recipients to click on a folder to review the document. While we are unable to confirm exactly what information is being asked of the recipient, similar phishing emails have prompted the recipient to provide their email address and password.

Email phishing schemes like this attempt to collect your personal information under false pretenses. These emails may also contain malicious code or viruses that could harm your computer. If you receive an email like this:

Do not click on any links contained in the email
Do not open any attachments
Do not respond in any way to the email
Make sure that your antivirus and malware programs are up to date

If you have clicked on any links and/or provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. Please send us an email at privacy@nordstrom.com if you interacted with the phishing email in any way. You may also wish to contact a credit reporting agency or your bank. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

3/25/2016
Customer Alert: Deceptive Nordstrom Gift Card Promo Link on Facebook

We recently learned about a deceptive $200 gift card link posted on Facebook that is using the Nordstrom name without our consent. The link points to a deceptive and malicious website (www[.]nordstrom[.]eastergiftcards[.]club) that offers a link for customers to send to two friends in order to receive the $200 gift card. We are concerned that customers attempting to take advantage of this "offer" may be duped into providing their personal information to a potential fraudster. Please be aware that this website is not affiliated with Nordstrom in any way.

If you have clicked on any links and/or provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

3/12/2016
Customer Alert: Email Phishing Scheme Spoofing the Trunk Club Email Domain Requesting DocuSign Review and Signature

We have recently learned of a phishing email received by a small number of Trunk Club clients that appeared to be from a Trunk Club employee.

Please be aware that Trunk Club is not associated with the content of this email in any way.

The subject line of the email was "Secured Doc" and instructed recipients to click on a document to review and sign called "Deeds Agreement." If the recipient clicks on the link, it takes them to a malicious website that asks them to select their email provider (e.g., Yahoo, Gmail) and to provide their user name and password. If the recipient selected the Gmail option, they were also prompted to enter a phone number and a second email address.

Do not click on any links contained in the email
Do not open any attachments
Do not respond in any way to the email
Make sure that your antivirus and malware programs are up to date

2/24/2016
Customer Alert: Deceptive Nordstrom Gift Card Promo Newsfeed on Facebook

We have learned about another deceptive coupon that is posted on Facebook newsfeeds that misleads customers to believe they can receive $200 off at Nordstrom. This coupon offer is not sponsored by Nordstrom and is once again using our name without our consent. The coupon links to a deceptive and potentially malicious website (www[.]nordstrom[.]com-support[.]club) that then offers another link for customers to send to five friends in order to receive the gift card.

If you have visited this website and shared any of your personal information, please contact Nordstrom to let us know this has occurred by calling 1.866.554.6591. We also recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

2/3/2016
Customer Alert: Deceptive Nordstrom Gift Card Promo Newsfeed on Facebook

We have learned about a deceptive coupon that is posted on Facebook newsfeeds that misleads customers to believe they can receive $200 off at Nordstrom. This coupon offer is not sponsored by Nordstrom and is using our name without our consent. The coupon links to a deceptive website (www[.]nordstrom[.]egift[.]co) that then offers another link for customers to send to three friends in order to receive the gift card. We are concerned that customers may be duped into providing their personal information to a potential fraudster. Again, this website is not affiliated with Nordstrom in any way.

2015

12/9/2015
Customer Alert: New Deceptive HauteLook Website

We have recently learned of a new deceptive website, www[.]huateLook[.]com (please note the misspelling, "u" before "a"), that is using the HauteLook name without the consent of HauteLook or Nordstrom. We are concerned that customers trying to visit HauteLook.com will reach this site by mistake. This deceptive website is capable of redirecting visitors to other sites, including malware sites or sites that ask visitors to complete a survey where references to HauteLook are actually spelled correctly. With the correct spelling at that site, visitors could get the wrong impression that the survey is authorized by HauteLook or Nordstrom when it is not. Please be aware that this website is not affiliated in any way with HauteLook or Nordstrom.

If you have visited this website and shared any of your personal information by phone or web, please contact the Nordstrom Privacy Department to let us know this has occurred by calling 1.866.554.6591. We also recommend you take precautions to safeguard your personal and financial information. This would include contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

During this holiday season, we especially encourage you to continue to protect yourself from online security risks or scams. Once again, here are some suggestions of ways you can protect yourself:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

10/21/2015
Customer Alert: Deceptive HauteLook Website

We have recently learned that a deceptive website, www[.]hautlook[.]com (please note the misspelling, without the "e"), is using the HauteLook name without the consent of HauteLook or Nordstrom. We are concerned that customers trying to visit HauteLook.com will reach this site by mistake. This deceptive website is capable of redirecting users to other sites, including web forgery and malware sites. These sites are generating security warnings that direct users to call suspicious phone numbers; these sites are also employing other tactics in an attempt to perpetrate fraud and other potentially malicious acts. Please be aware that this website is not affiliated in any way with HauteLook or Nordstrom.

If you have visited this website and shared any of your personal information by web or by phone, please contact Nordstrom to let us know this has occurred by calling 1.866.554.6591. We also recommend you take precautions to safeguard your personal and financial information. This would include contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

We encourage you to continue to protect yourself from online security risks or scams. Here are some suggestions:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

6/19/2015
Customer Alert: Deceptive Nordstrom Card Website

We recently learned that a deceptive website, ww41[.]nordstromscard[.]com, is using the Nordstrom name without our consent. We are concerned that customers attempting to reach our Nordstrom Card website (www.nordstromcard.com) may encounter this one by mistake. The deceptive website offers a free prize in exchange for customers taking a seven-question survey about their experience with Nordstrom. The prizes offered are not items that are available from Nordstrom, and you are required to provide your credit card number in order to pay for the shipping and handling of the free prize. Please be aware that this website is not affiliated with Nordstrom in any way.

If you have visited this website and shared any personal information, we recommend that you take precautions to safeguard your personal and financial information. This would include contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

We encourage you to continue to protect yourself from online security risks or scams. Here are some suggestions:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and anti-virus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

5/20/2015
Customer Alert: Deceptive Websites Selling Special Occasion Dresses

We recently learned about two deceptive websites that are using the Nordstrom name, or a name similar to Nordstrom, without our consent. The websites are: www[.]nordstromdresses[.]com and www[.]nordstormdresses[.]com. Both websites are based in China and sell special occasion dresses for proms, weddings and other events. It is unknown at this time whether the products they offer are genuine or counterfeit. Please be aware that these websites are not affiliated with Nordstrom in any way.

If you have visited these websites, shared any personal information or made any purchases, we recommend that you take precautions to safeguard your personal and financial information. This would include contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

We encourage you to continue to protect yourself from online security risks or scams. Here are some suggestions:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

4/6/2015
Customer Alert: Email Phishing Scheme Offers Fake Nordstrom Modeling Contract

We recently learned that customers have received a fraudulent email that offered a fake Nordstrom modeling contract for an upcoming photo shoot in New York.

Please be aware that Nordstrom is not affiliated with this email in any way.

The sender of the email is "Renee Whitaker" and the email comes from models@rajonmodels.com. The body of the email includes an unauthorized usage of the Nordstrom brand name, an image of a Nordstrom store, and a Nordstrom logo that the company no longer uses. The message in the email says the following (stet.):

We look forward to you being apart of an iconic brand. The dates will be from April 18 - 22. Your package will include first class travel by American or Delta airlines. Hotel accomodations will be provided for in New York. Your pay rate will be negotiated with your agent with a mininum of the standard and customary national rate based on your previous work. You will be provided a per diem which is spending income for any small expenses. If you don't have an agent we need to know as soon as, possible. Please reply with your agency information and a direct contact number, If you don't have an agency please reply with your contact number so we can send the contract today.

On behalf of the Nordstrom Marketing Team,

Do not click on any links contained in the email
Do not open any attachments
Do not respond in any way to the email
Make sure that your antivirus and malware programs are up to date

If you have clicked on any links and/or provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

2014

12/12/2014
Customer Alert: Deceptive Website Selling UGG Products

We recently learned about a deceptive website that is using a domain name very similar to Nordstrom: www[.]nordstarom[.]com (note the misspelling). This website is based in China and sells only UGG products. It is unknown at this time whether the products they offer are genuine or counterfeit. The website was recently registered, therefore it should be approached with extreme caution.

Please be aware that this website is not affiliated with Nordstrom in any way.

If you have visited this website, shared any personal information or made any purchases, we recommend that you take precautions to safeguard your personal and financial information. This would include contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

We encourage you to continue to protect yourself from online security risks or scams. Here are some suggestions:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

4/9/2014
Internet Security Alert: "Heartbleed" Bug—Nordstrom Websites Are Not Affected

We take your online safety and security very seriously. You may have heard about the "Heartbleed" software bug. We want you to know that Nordstrom websites are not affected by this bug. This bug affects OpenSSL encryption, which is used by many websites to securely connect users with the website. Nordstrom does not use this form of SSL encryption, and your connections with us are not at risk.

Websites using the impacted version of OpenSSL have been instructed to immediately apply a patch to their OpenSSL software and to take other appropriate steps. If this bug is used by an attacker, communications and the information in them could potentially be accessed and stolen.

We encourage you to continue to protect yourself from online security risks or scams. Here are some suggestions:

Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Change your passwords frequently
Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

Visit these additional resources:
https://www.us-cert.gov/ncas/tips
https://www.microsoft.com/en-us/safety/pc-security/protect-pc.aspx
http://www.clark.com/clark-howards-virus-spyware-and-malware-protection

2012

12/18/2012
Customer Alert: Deceptive Website Offering Counterfeit Louis Vuitton Handbags

We recently learned about a deceptive website that is using both the Nordstrom and Louis Vuitton names without permission: www[.]nordstrom-louisvuitton[.]net. This website is based in China and is selling counterfeit Louis Vuitton handbags. This domain has also been verified as serving malware.

Please be aware that Nordstrom and Louis Vuitton are not affiliated with this website in any way.

If you have visited the site and shared any personal information, we recommend that you take precautions to safeguard your personal and financial information, including contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring.

In addition, to help protect yourself from online shopping scams:

Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Reset your online account passwords
Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others

For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

11/30/2012
Customer Alert: Unauthorized Survey Pop-Up on Nordstrom.com Website

We have heard about a pop-up window appearing while customers are shopping on our Nordstrom.com website. The pop-up asks the customer to take a survey about their experience with Nordstrom. In exchange, the customer is offered a free bottle of perfume if they agree to pay $5 in shipping charges. We have learned that after completing the survey and accepting the offer, the customer may be unintentionally enrolling in a subscription program with a company called Endless Aroma that results in additional charges to the same credit card they used to pay for the shipping of the free bottle of perfume.

Please be aware that Nordstrom is not affiliated with this survey and offer in any way. Also, please know that our customers should not ever encounter any pop-up windows from Nordstrom or any other company while shopping on our website. If you happen to receive a pop-up window of any kind while shopping on our website, please do not provide any of your personal information.

If you have experienced a similar situation and provided any personal information, please contact Nordstrom to let us know this has occurred by calling 1.866.554.6591. We also recommend that you take all necessary precautions to safeguard your personal and financial information, and contact your bank to assist you with credit or account monitoring. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

11/16/2012
Potential Unauthorized Access of Nordstrom.com Accounts
Update to Online Shopping Safety Fraud Alert (6/24/2011, 9/6/2011)

We recently confirmed nine cases of customers' Nordstrom.com online accounts being accessed without authorization. In those cases, the online accounts were accessed using the customers' login information (email addresses and passwords). We are uncertain as to how the customers' email addresses and passwords were obtained. We believe the common practice of using the same email address and password as logins across multiple websites may have made customers' online accounts vulnerable or that some customers may not have necessary security measures applied to their computer. We have no evidence that our networks and systems were breached or that password files were compromised.

The nine customers reported this issue to Nordstrom after finding unauthorized orders placed through their online accounts or unfamiliar information in their online accounts. Through further analysis of the nine cases, we also detected certain fraud patterns that suggested potential unauthorized access of a small number of other Nordstrom.com online accounts. Although there is no information that these other Nordstrom.com online accounts were used for fraudulent transactions, we are notifying potentially impacted customers of this issue by mail this week so they can take precautions to ensure their personal information is secure. We are asking customers to carefully review their accounts and immediately report any unexpected activity to Nordstrom and their credit card company. Additionally, we are asking all our customers to take measures to help protect personal information in their online accounts, including the following:

Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Reset your email account password
Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

Nordstrom takes these issues very seriously, and we are continuing to take steps where we can to prevent these types of incidents from happening.

11/15/2012
Customer Alert: Reese Mobile Offering Unauthorized "Nordstrom Rack" Android app

We have recently learned that Reese Mobile is selling a "Nordstrom Rack" Android app. Nordstrom Rack is not associated with this Android app in any way. The Nordstrom Rack name and the images are being used without Nordstrom consent. The Reese Mobile "Nordstrom Rack" Android app was last updated on November 13, 2012.

Keep in mind that Nordstrom does have an authorized Android app, which is offered free of charge. To verify that you have downloaded the Nordstrom-approved Android application, please ensure that the app states Nordstrom, Inc., and not Reese Mobile.

If you have downloaded the Reese Mobile "Nordstrom Rack" Android app, we recommend that you take all necessary precautions to safeguard your personal and financial information:

Please do not click on any links within the app or provide any personal information
You may wish to contact a credit reporting agency and/or your financial institution to assist you with credit or account monitoring. For more information on how to safeguard your information, visit https://www.us-cert.gov/ncas/tips
You may wish to delete the app from your device

If you have purchased and downloaded the fraudulent "Nordstrom Rack" app, contact Google Play Store at 650.253.0000. You may also contact Nordstrom at 206.233.6970 or email privacy@nordstrom.com.

7/25/2012
Customer Alert: Email Phishing Scheme Offers Nordstrom and Nordstrom Rack Customers a $1,000 Visa Gift Card

Several customers have reported receiving phishing emails that offer them a $1,000 Visa gift card as a thank-you from Nordstrom or Nordstrom Rack.

Please be aware that Nordstrom is not affiliated with these emails in any way. We have heard about several other retailers, banks and even television stations whose customers have reported the same phishing email scam.

The email comes from a sender named "Message Center" that uses several different email addresses. The subject of the email is: "(Your Name), a thank you from Nordstrom." The message says that on behalf of Nordstrom, the recipient has been issued a free $1,000 Visa gift card. It also includes the recipient's name and an "Issuing Branch" in the same city and state where the recipient lives. In order to claim the gift card, the recipient must go to the website www[.]rewards2012[.]com within 48 hours or the link will become invalid.

Email phishing schemes attempt to collect your personal information under false pretenses. These emails may also contain malicious code or viruses that could harm your computer. If you receive an email like this:

Do not click on any links contained in the email
Do not open any attachments
Do not respond in any way to the email
Make sure that your antivirus and malware programs are up to date

If you have clicked on any links and/or provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

7/2/2012
Customer Alert: Callers to Customer Service Lines Targeted by Gift Card Scam

We have heard from customers who have called our customer service phone number, but instead have been redirected to another number. When the customer is redirected, the individuals who answer the phone attempt to engage the customer in a fraudulent gift card offer. The individual who answers the phone knows what telephone number the caller is dialing from and verifies that number. They explain that due to technical problems the caller cannot be connected to the customer service department they are attempting to contact. The individual then offers the customer a gift card for their inconvenience. They say that in order to receive the gift card, the customer must provide a debit or credit card number to pay for shipping and handling charges.

If you experience this pattern, please be aware that you are NOT talking with Nordstrom. Your call has been intercepted by fraudsters.

Please know that Nordstrom does not outsource any calls from our customers to a third party. The intercept has taken place before the caller reaches Nordstrom. We have found that the customers who have been redirected to fraudulent call centers subscribe to a bundled Internet/phone/cable service. If you experienced this situation and provided your personal information, please contact Nordstrom to let us know this has occurred by calling 1.800.964.0005. We also recommend that you take all necessary precautions to safeguard your personal and financial information, and contact both your communication services provider and your bank to assist you with credit or account monitoring. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

3/29/2012
Customer Alert: Website Offering Alleged Anna Elyse Bridesmaid Dresses

We have learned that a website based in China called "ISOOI" is selling alleged Anna Elyse bridesmaid dresses at a substantial discount. Anna Elyse Bridesmaids has stated that these are not authentic Anna Elyse dresses. Additionally, this website is using product information and images of the dresses taken from Nordstrom's website without Nordstrom's permission. This website also falsely states that "purchases made online can also be returned or exchanged at any Nordstrom store, free of charge."

Nordstrom is not associated with this website in any way. We are concerned that any customer information provided to the site could also be used fraudulently. If you have visited the site and shared any personal information, we recommend that you take precautions to safeguard your personal and financial information, including contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring. You may also want to install an antivirus or antispyware program on your computer and ensure that it is kept up to date.

2011

12/23/2011
Customer Alert: Deceptive Website with Unapproved Gift Card Offer

We have learned that a website is using a deceptive URL address that includes a misspelled version of "Nordstrom." The URL address is www[.]nordtrom[.]com.

Our customers are finding this address as a result of mistakenly typing "nordtrom" instead of "nordstrom" when they conduct a web search. When our customers have clicked on this deceptive link, they are taken to a website that offers a free $1,000 Nordstrom gift card to visitors who complete a survey. The customer is asked for their email address in order to begin the survey. Although it has not been verified what actually happens when the survey is completed, our previous experience with similar schemes has shown that the customer is redirected to other sites that may be using malicious software.

Nordstrom is not associated with this website or the free gift card offer in any way. Our name and the images on the site are being used without our consent. If you have visited the site and provided any personal information, we recommend that you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency and/or your bank to assist you with credit or account monitoring. You may also want to install an antivirus or antispyware program and ensure that it is kept up to date. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

12/13/2011
Customer Alert: Unapproved Website Offering Fraudulent Nordstrom Gift Card or Prize

We have recently learned that the website www[.]nordstrom[.]cm is using a deceptive URL address that includes unauthorized use of the Nordstrom name. Our customers are finding this address as a result of mistakenly typing ".cm" instead of ".com" while conducting a web search for Nordstrom. It also has appeared as a pop-up on their screen. After clicking on the link, customers are sent to a website with the URL http://cache9019[.]com/ND/. Customers have reported seeing two different displays:

A box is displayed that says "Welcome in november edition of Nordostorm Giveaway Day [sic]." It informs the customer that every afternoon someone is randomly selected as their "lucky winner" and, in every instance, the visiting customer happens to be the one. The website may appear to know the customer's general location. For example, it may say "...you are the winner from Seattle in Washington." At the bottom of the box, a button says "Click here to Continue." In the background are the words "You Win $500 Gift Card!" with data fields asking the customer for their name, mobile phone number and email address. There is also a picture of a Nordstrom gift card.
"Nordstrom" is emblazoned across the top of the web page, promising the customer an unknown prize if they complete a survey. The only question displayed asks the gender of the visitor.

Nordstrom is not associated with this website or the free gift card or prize offer in any way. Our name and the images on the site are being used without our consent. If you have visited the site and provided any personal information, we recommend that you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency and/or your bank to assist you with credit or account monitoring. For more information on steps you can take to protect yourself, please visit https://www.us-cert.gov/ncas/tips.

12/12/2011
Customer Alert: Email Phishing Scheme Solicits New Employees for Nordstrom in Russia

Recently it has come to our attention that several customers have received emails from an individual claiming to be a "Nordstrom Client Manager." The email says that Nordstrom will be opening offices in Russia and is soliciting new employees from the United States for employment in Russia. Interested parties are asked to forward their resume to the email address nordstromcis@rambler.ru.

Please be aware that Nordstrom is not affiliated with these emails in any way, and the information in the emails is false.

Email phishing schemes attempt to collect your personal information under false pretenses. Additionally, these emails may contain malicious code or viruses that could harm your computer. If you receive an email like this:

Do not click on any links contained in the email
Do not open any attachments
Do not respond in any way to the email
Make sure that your antivirus and malware programs are up to date

9/6/2011
Potential Unauthorized Access of Nordstrom.com Accounts
Update to Online Shopping Safety Fraud Alert (6/24/2011)

We recently confirmed 17 cases of customers' Nordstrom.com online accounts being accessed without authorization. In those cases, the online accounts were accessed using the customers' login information (email addresses and passwords). We are uncertain as to how the customers' email addresses and passwords were obtained. We believe the common practice of using the same email address and password as logins across multiple websites may have made customers' online accounts vulnerable. We have no evidence that our networks and systems were breached or that password files were compromised.

The 17 customers reported this issue to Nordstrom after finding unauthorized orders placed through their online accounts or unfamiliar information in their online accounts. Through further analysis of the 17 cases, we also detected certain fraud patterns that suggested potential unauthorized access of a small number of other Nordstrom.com online accounts. Although there is no information that these other Nordstrom.com online accounts were used for fraudulent transactions, we are notifying potentially impacted customers of this issue by mail this week so they can take precautions to ensure their personal information is secure. We are asking customers to carefully review their accounts and immediately report any unexpected activity to Nordstrom and their credit card company. Additionally, we are asking all our customers to take measures to help protect personal information in their online accounts, including the following:

Install the latest security updates and antivirus software on your computer to help prevent malware and viruses
Reset your email account password
Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
Do not use the same password on more than one website
Do not share your password with others
Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal

Nordstrom takes these issues very seriously, and we are continuing to take steps where we can to prevent these types of incidents from happening.

6/30/2011
Customer Alert: Fraudulent Website with Unapproved Nordstrom Gift Card Offer

We have learned that a website with a URL address that includes a misspelled version of "nordstrom" using Nordstrom images and language similar to Nordstrom.com is offering a $1,000 Nordstrom gift card to visitors who complete a survey. The survey asks for visitor email addresses and other personal information. Also, it appears that as visitors fill out the survey, they are redirected to other sites that may be using malicious software.

Nordstrom is not associated with this website or the free gift card offer. Our name and the images on the site are being used without our consent.

If you have visited the site and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. You may also want to install an anti-virus or antispyware program and ensure that it is kept up to date.

6/24/2011
Online Shopping Safety Fraud Alert

Nordstrom closely monitors any unusual activity as it relates to our online customer accounts. This allows us to take steps to investigate any issues and, if necessary, share information with customers so that they can take steps to ensure a safe and secure online shopping experience.

Recently, we found that a small number of Nordstrom.com customers have seen unauthorized activity in their accounts. For example, customers have discovered an unfamiliar shipping address when they are attempting to make their purchases. Though our investigation is ongoing, we have no evidence at this time that Nordstrom systems have been breached. Our initial review suggests that these customers may have had their login credentials compromised by criminals who added fraudulent information into their online accounts. No Nordstrom customer saw any other Nordstrom customer's personal information.

While our investigation continues, we are working with impacted customers to help them resolve their specific issues. We are also implementing additional website security processes.

Issues such as these are a good reminder that all online customers should take measures to protect themselves against unauthorized access now and in the future. Below are some steps that will help protect your online account information:

Keep your computer operating system up to date and patched to prevent malware and viruses
If you do not already have antivirus software, you should install it now
Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
If you have not been using a complex password, update the password used with your online account at Nordstrom.com
Do not use the same password on more than one website; if your password is compromised on one site, but continues to be used on other sites, you may be at risk
Do not share your password with others
Sign out/log off your website session when you are done shopping so that your session is closed and cannot be accessed by another user on the same computer
If using a public computer or terminal, always log out when you complete an online session

Additional resources:
https://www.us-cert.gov/ncas/tips
https://www.microsoft.com/en-us/safety/pc-security/protect-pc.aspx
http://www.clark.com/clark-howards-virus-spyware-and-malware-protection

It is important to note that Nordstrom will never send you a message requesting you provide your password credentials or other sensitive data such as your account number or Social Security number.

We encourage you to always carefully review your account when placing your order. Call our Customer Contact Center at 1.800.285.5800 if you discover any suspicious information, such as an unfamiliar shipping address, associated with your Nordstrom online account, or if you have any other concerns.

We are continuing to fully review these issues so we can better understand how they occurred and appropriately respond to them. We will keep our customers informed as we learn more.

1/17/2011
Customer Alert: Gift Card Emails

We have learned of phishing emails using the Nordstrom name that ask the recipient to click a link and claim a shopping spree or gift card prize. Please be aware that Nordstrom is not involved in these "shopping spree" or "free gift card" offers and is not affiliated with these emails.

Emails from unknown sources that ask you to claim a prize in return for clicking a link may be an attempt to fraudulently collect your personal or financial information. If you think that you may have disclosed your personal or account information in error, or that you have been a victim of fraudulent account activity, please contact your bank and/or credit card company immediately. You may also wish to contact a credit reporting agency.

2010

12/10/2010
Customer Alert: Zeus Botnet/Malware Warning

Nordstrom has been alerted that a new form of malware is currently targeting retailers and their website users. While browsing, users have encountered a pop-up form that requests personally identifiable information and that may appear to be connected to the retailers' website. Nordstrom is one of the retailers. The legitimate-looking pop-up reads as follows: "In order to provide you with extra security, we occasionally need to ask for additional information when you access your account online. Please enter the information below to continue." The pop-up form requests personal information including credit card information, Social Security number, date of birth and mother's maiden name.

Please be aware that Nordstrom is not affiliated with these pop-up forms. Nordstrom.com only requests information from customers using our secure online account registration and/or during our secure checkout process.

If you have encountered a pop-up form while shopping online and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. You may also want to install an antivirus or antispyware program and ensure that it and any other software programs are kept up to date.

8/21/2010
Customer Alert: Fraudulent Shipping Confirmation Emails

Some of our customers have received emails that look like they originate from Nordstrom but are fraudulent. These emails may look like a Nordstrom order confirmation or shipping confirmation but could include incorrect contact information or items not ordered. Within these emails, there are links that may contain malicious code or viruses that could harm your computer. Please be aware that Nordstrom is not affiliated with these emails.

If you have received an email from an unknown source purporting to be from Nordstrom, we recommend you do not click any links. If you have clicked the links, we recommend you take all necessary precautions to safeguard your personal and financial information. You may also want to install an antivirus program and ensure that it is updated at all times.

6/23/2010
Customer Alert: Fraudulent Website Links

Some of our customers have encountered fraudulent website links that appear as "sponsored link" on Internet search engines. These links lead to websites that include promotional offers for Nordstrom merchandise and/or gift cards. Wherever possible, we are requesting that these types of links be removed. Please be aware that Nordstrom is not involved in these types of promotions and is not affiliated with these websites. Additionally, Nordstrom does not partner with other websites in offering our gift cards or merchandise via "sponsored links."

If you have clicked on such a link and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank.