Fraud Alert

We urge our customers to be cautious with personal and account information.

If you think that you may have disclosed your personal or account information in error, or that you have been a victim of fraudulent account activity, please contact your bank and/or credit card company immediately. You may also wish to contact a credit reporting agency.

Please know that Nordstrom would not ask for your account information through e-mail or text message communication. If you receive an unsolicited e-mail or text message requesting personal or account information that appears to be from Nordstrom or related to your Nordstrom account, please call us at 1-888-282-6060 or forward it to onlinefraud@nordstrom.com. We take these matters, and the protection of our customers' sensitive information, very seriously.

To help protect yourself from possible e-mail scams:

• Avoid urgent requests to click on a link and log in to your account because your password has expired. Be aware of the urgency used in the e-mail and consequences resulting in lack of action: Does it demand attention and indicate there will be consequences if the recipient does not take action? If so, this could indicate that the e-mail is fraudulent.
• Look closely at the Sender's e-mail address in the 'From' line, which may contain unusual characters or misspellings. Suspicious e-mails often appear to come from legitimate sources.
• Watch out for errors in grammar, word choice, and sentence structure. You should validate any e-mails that seem out of place or contain glaring errors.
• Check for broken, out-of-place, or incorrect images or graphics that are often different than those seen on the business's legitimate website.
• Note if the request seems out of character. lf requesting personally identifiable information, check the business's privacy policy to see if it states that they do not request information in this manner.
• Be wary of embedded hyperlinks by hovering your mouse over the link and verifying if the hyperlink and URL match. Instead of clicking on the hyperlink, open a new browser window and type in the URL. Do not copy and paste the URL from the e-mail into your browser.

3/29/2012
Customer Alert – Website Offering Alleged Anna Elyse Bridesmaid Dresses

We have learned that a website based in China called "ISOOI" is selling alleged Anna Elyse bridesmaid dresses at a substantial discount. Anna Elyse Bridesmaids has stated that these are not authentic Anna Elyse dresses. Additionally, this website is using product information and images of the dresses taken from Nordstrom's website without Nordstrom's permission. This website also falsely states that "Purchases made online can also be returned or exchanged at any Nordstrom store, free of charge."

Nordstrom is not associated with this website in any way. We are concerned that any customer information provided to the site could also be used fraudulently. If you have visited the site and shared any personal information, we recommend that you take precautions to safeguard your personal and financial information, including contacting a credit reporting agency and/or your bank to assist you with credit or account monitoring. You may also want to install an anti-virus or anti-spyware program on your computer and ensure that it is kept up-to-date.

12/23/2011
Customer Alert - Deceptive Website with Unapproved Gift Card Offer

We have learned that a website is using a deceptive URL address that includes a misspelled version of "Nordstrom." The URL address is www.nordtrom.com.

Our customers are finding this address as a result of mistakenly typing "nordtrom" instead of "nordstrom" when they conduct a web search. When our customers have clicked on this deceptive link, they are taken to a website that offers a free $1,000 Nordstrom gift card to visitors who complete a survey. The customer is asked for their e-mail address in order to begin the survey. Although it has not been verified what actually happens when the survey is completed, our previous experience with similar schemes has shown that the customer is redirected to other sites that may be using malicious software.

Nordstrom is not associated with this website or the free gift card offer in any way. Our name and the images on the site are being used without our consent. If you have visited the site and provided any personal information, we recommend that you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency and/or your bank to assist you with credit or account monitoring. You may also want to install an antivirus or antispyware program and ensure that it is kept up-to-date. For more information on steps you can take to protect yourself, please visit http://www.us-cert.gov/cas/tips/.

12/13/2011
Customer Alert - Unapproved Website Offering Fraudulent Nordstrom Gift Card or Prize

We have recently learned that a website is using a deceptive URL address that includes unauthorized use of the Nordstrom name, www.nordstrom.cm. Our customers are finding this address as a result of mistakenly typing ".cm" instead of ".com" while conducting a web search for Nordstrom. It also has appeared as a pop-up on their screen. After clicking on the link, customers are sent to a website with the URL http://cache9019.com/ND/. Customers have reported seeing two different displays:

• A box is displayed which says: "Welcome in november edition of Nordostorm Giveaway Day [sic]." It informs the customer that every afternoon someone is randomly selected as their "lucky winner" and, in every instance, the visiting customer happens to be the one. The website may appear to know the customer's general location. For example: "...you are the winner from Seattle in Washington." At the bottom of the box a button says: "Click here to Continue." In the background are the words "You Win $500 Gift Card!" with data fields asking the customer for their name, mobile phone number and e-mail address. There is also a picture of a Nordstrom Gift Card.
• "Nordstrom" is emblazoned across the top of the webpage, promising the customer an unknown prize if they complete a survey. The only question displayed asks the gender of the visitor.

Nordstrom is not associated with this website or the free gift card or prize offer in any way. Our name and the images on the site are being used without our consent. If you have visited the site and provided any personal information, we recommend that you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency and/or your bank to assist you with credit or account monitoring. For more information on steps you can take to protect yourself, please visit http://www.us-cert.gov/cas/tips/.

12/12/11
Alert—E-mail Phishing Scheme Solicits New Employees for Nordstrom in Russia

Recently it has come to our attention that several customers have received e-mails from an individual claiming to be a "Nordstrom Client Manager." The e-mail says that Nordstrom will be opening offices in Russia and is soliciting new employees from the United States for employment in Russia. Interested parties are asked to forward their resume to the e-mail address nordstromcis@rambler.ru.

Please be aware that Nordstrom is not affiliated with these e-mails in any way, and the information in the emails is false.

E-mail phishing schemes attempt to collect your personal information under false pretenses. Additionally, these e-mails may contain malicious code or viruses that could harm your computer. It is important to note that if you receive an e-mail like this that you:

• Do not click on any links contained in the e-mail.
• Do not open any attachments.
• Do not respond in any way to the e-mail.
• Make sure that your antivirus and malware programs are up to date.

If you have clicked on any links and/or provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank.

9/06/11
Potential Unauthorized Access of Nordstrom.com Accounts

Update to Online Shopping Safety Fraud Alert (6/24/2011)

We recently confirmed 17 cases of customers' Nordstrom.com online accounts being accessed without authorization. In those cases, the online accounts were accessed using the customers' login information (e-mail addresses and passwords). We are uncertain as to how the customers' e-mail addresses and passwords were obtained. We believe the common practice of using the same e-mail address and password as logins across multiple websites may have made customers' online accounts vulnerable. We have no evidence that our networks and systems were breached or that password files were compromised.

The 17 customers reported this issue to Nordstrom after finding unauthorized orders placed through their online accounts or unfamiliar information in their online accounts. Through further analysis of the 17 cases, we also detected certain fraud patterns that suggested potential unauthorized access of a small number of other Nordstrom.com online accounts. Although there is no information that these other Nordstrom.com online accounts were used for fraudulent transactions, we are notifying potentially impacted customers of this issue by mail this week so they can take precautions to ensure their personal information is secure. We are asking customers to carefully review their accounts and immediately report any unexpected activity to Nordstrom and their credit card company. Additionally, we are asking all our customers to take measures to help protect personal information in their online accounts, including the following:

• Install the latest security updates and anti-virus software on your computer to help prevent malware and viruses
• Reset your e-mail account password
• Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
• Do not use the same password on more than one website
• Do not share your password with others
• Sign out/log off website sessions so that your session is closed and cannot be accessed by another user on the same computer, especially when using a public computer or terminal
• Visit these additional resources:
• http://www.us-cert.gov/cas/tips/
• http://www.microsoft.com/security/pc-security/protect-pc.aspx
• http://www.clarkhoward.com/news/clark-howard/technology/clark-howards-virus-spyware-and-malware-protection/nFZJ/

Nordstrom takes these issues very seriously, and we are continuing to take steps where we can to prevent these types of incidents from happening.

6/30/2011
Customer Alert - Fraud Website with Unapproved Nordstrom Gift Card Offer

We have learned that a website with a URL address that includes a misspelled version of "nordstrom" using Nordstrom images and language similar to nordstrom.com is offering a $1,000 Nordstrom gift card to visitors who complete a survey. The survey asks for visitor e-mail addresses and other personal information. Also, it appears that as visitors fill out the survey, they are redirected to other sites that may be using malicious software.

Nordstrom is not associated with this website or the free gift card offer. Our name and the images on the site are being used without our consent.

If you have visited the site and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. You may also want to install an anti-virus or antispyware program and ensure that it is kept up-to-date.

6/24/11
Online Shopping Safety Fraud Alert

Nordstrom closely monitors any unusual activity as it relates to our online customer accounts. This allows us to take steps to investigate any issues and, if necessary, share information with customers so that they can take steps to ensure a safe and secure online shopping experience.

Recently, we found that a small number of Nordstrom.com customers have seen unauthorized activity in their accounts. For example, customers have discovered an unfamiliar shipping address when they are attempting to make their purchases. Though our investigation is ongoing, we have no evidence at this time that Nordstrom systems have been breached. Our initial review suggests that these customers may have had their login credentials compromised by criminals who added fraudulent information into their online accounts. No Nordstrom customer saw any other Nordstrom customer's personal information.

While our investigation continues, we are working with impacted customers to help them resolve their specific issues. We are also implementing additional website security processes.

Issues such as these are a good reminder that all online customers should take measures to protect themselves against unauthorized access now and in the future. Below are some steps that will help protect your online account information:

• Keep your computer operating system up to date and patched to prevent malware and viruses
• If you do not already have antivirus software, you should install it now
• Use complex passwords (a minimum of 7 alpha/numeric cAsE sEnsitive characters)
• If you have not been using a complex password, update the password used with your online account at Nordstrom.com
• Do not use the same password on more than one website; if your password is compromised on one site, but continues to be used on other sites, you may be at risk
• Do not share your password with others
• Sign out/log off your website session when you are done shopping so that your session is closed and cannot be accessed by another user on the same computer
• If using a public computer or terminal, always log out when you complete an online session
• Additional resources:
  • http://www.us-cert.gov/cas/tips/
  • http://www.microsoft.com/security/pc-security/protect-pc.aspx
  • http://www.clarkhoward.com/news/clark-howard/technology/clark-howards-virus-spyware-and-malware-protection/nFZJ/

It is important to note that Nordstrom will never send you a message requesting you provide your password credentials or other sensitive data such as your account number or Social Security number.

We encourage you to always carefully review your account when placing your order. Contact our Customer Contact Center at 1-800-285-5800 if you discover any suspicious information associated with your Nordstrom online account, such as a shipping address you don't recognize, or if you have any other concerns.

We are continuing to fully review these issues so we can better understand how they occurred and appropriately respond to them. We will keep our customers informed as we learn more.

1/17/11
Customer Alert - Gift Card E-mails

We have learned of phishing e-mails using the Nordstrom name that ask the recipient to click a link and claim a shopping spree or gift card prize. Please be aware that Nordstrom is not involved in these 'shopping spree' or 'free gift card' offers and is not affiliated with these e-mails.

E-mails from unknown sources that ask you to claim a prize in return for clicking a link may be an attempt to fraudulently collect your personal or financial information. If you think that you may have disclosed your personal or account information in error, or that you have been a victim of fraudulent account activity, please contact your bank and/or credit card company immediately. You may also wish to contact a credit reporting agency.

12/10/10
Alert – Zeus Botnet/Malware Warning

Nordstrom has been alerted that a new form of malware is currently targeting retailers and their website users. While browsing, users have encountered a pop-up form requesting personally identifiable information, which may appear to be connected to the retailers' website. Nordstrom is one of the retailers. The legitimate-looking pop-up reads: "In order to provide you with extra security, we occasionally need to ask for additional information when you access your account online. Please enter the information below to continue." The pop-up form requests personal information including Credit Card information, Social Security numbers, Date of Birth and Mother's Maiden name.

Please be aware that Nordstrom is not affiliated with these pop-up forms. Nordstrom.com only requests information from customers using our secure online account registration and/or during our secure checkout process.

If you have encountered a pop-up form while shopping online and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank. You may also want to install an anti-virus or antispyware program and ensure that it and any other software programs are kept up to date.

8/21/10
Alert - Fraudulent Shipping Confirmation E-mails

Some of our customers have received e-mails that look like they originate from Nordstrom but are fraudulent. These e-mails may look like a Nordstrom Order or Shipping Confirmation but could include items not ordered or incorrect contact information. Within these e-mails there are links that may contain malicious code or viruses that could harm your computer. Please be aware that Nordstrom is not affiliated with these e-mails.

If you have received an e-mail from an unknown source purporting to be from Nordstrom we recommend you do not click any links. If you have clicked the links, we recommend you take all necessary precautions to safeguard your personal and financial information. You may also want to install an anti-virus program and ensure that it is updated at all times.

6/23/10
Alert - Fraudulent Website Links

Some of our customers have encountered fraudulent website links that appear as "sponsored link" on internet search engines. These links lead to websites that include promotional offers for Nordstrom merchandise and/or gift cards. Wherever possible, we are requesting that these types of links are removed. Please be aware that Nordstrom is not involved in these types of promotions and is not affiliated with these websites. Additionally, Nordstrom does not partner with other websites in offering our gift cards or merchandise via "sponsored links".

If you have clicked on such a link and provided any personal information, we recommend you take all necessary precautions to safeguard your personal and financial information. You may wish to contact a credit reporting agency or your bank.