Report: Neiman Marcus breach lasted July to January