On December 11, 2024, in its third-quarter results announcement, Macy’s said its investigation had identified $151 million in delivery expenses intentionally concealed by one employee. The expenses accumulated from the fourth quarter of fiscal 2021 through the second quarter of fiscal 2024. Macy’s said the investigation identified no involvement by other employees.
The accounting record supports a narrower distinction. One employee was the identified actor. Macy’s third-quarter Form 10-Q also disclosed material weaknesses in internal control over financial reporting. Those are findings about the company’s reporting system, not simply a description of an employee’s conduct.
What did Macy’s attribute to the employee?
Macy’s attributed the concealment to an employee responsible for small-package delivery expense accounting. Its account described intentional erroneous accounting entries, rather than an ordinary estimate that later proved inaccurate. The employee was no longer employed by the company when Macy’s announced the investigation’s findings.
That supports the company’s statement about who carried out the identified conduct. It does not establish that every control surrounding that person worked properly. Nor does it establish that additional employees knowingly participated. Participation and failure to detect are different findings.
There is an evidentiary boundary here. The public record contains Macy’s description of the investigation, not the underlying interviews and complete investigative work papers. The defensible conclusion is that Macy’s reported finding one participant. An accusation against unnamed colleagues would go beyond that record.
What did the $151 million measure?
The $151 million was a cumulative expense correction spanning several reporting periods. It was not a $151 million loss newly generated during the quarter ended November 2, 2024. Treating it as a single-quarter operating event would misdescribe both the timing and the correction.
Macy’s revised previously reported financial information in its third-quarter Form 10-Q. The revision disclosures allocate the accounting effects to the affected periods and show the associated changes to financial statement balances. The correction belongs beside those comparative figures, not merely beside the latest quarter’s headline earnings.
The underlying distinction is straightforward. A delivery invoice and the entry recording it answer different questions. The invoice concerns an obligation for a service. The accounting entry determines whether that expense appears in the right reporting period. Concealing an expense can distort reported earnings without making the underlying delivery service fictitious.
Did cash have to disappear?
Macy’s said the erroneous accounting entries did not affect its cash management activities or vendor payments. That matters. The company was not describing $151 million stolen from a bank account or $151 million in delivery bills necessarily left unpaid.
But an unaffected payment process does not make the financial statements correct. Paying a vendor and recognizing an expense are separate accounting events. The correction concerned the reporting of delivery expenses, even though Macy’s said the payment machinery was unaffected.
Federal securities law makes that distinction explicit. Section 13(b)(2) of the Securities Exchange Act requires issuers to maintain books that accurately and fairly reflect transactions. It separately requires a system of internal accounting controls providing reasonable assurance over recording and accountability. A payment can reach the proper vendor while the related accounting still fails the books-and-records requirement.
Why revise rather than restate?
Macy’s concluded that the errors were not material to its previously issued financial statements. It revised historical information in the third-quarter filing. That accounting treatment should not be translated into a finding that nothing important happened.
SEC Staff Accounting Bulletin No. 99 rejects a purely numerical test of materiality. The assessment includes the surrounding circumstances. Its discussion specifically addresses intentional misstatements and their potential significance. Intent does not automatically settle every materiality judgment, but neither can management dispose of the question with a percentage alone.
Staff Accounting Bulletin No. 108 addresses another problem relevant to accumulated errors. An issuer must consider both the current-period income statement effect and the cumulative balance-sheet effect. An error can build across periods even when each individual increment appears smaller.
These rules explain why the cumulative $151 million and the period-by-period revisions both matter. The total describes the accumulated concealment. The revision tables describe where the financial reporting was wrong.
What did the controls disclosure add?
Item 4 of Macy’s third-quarter Form 10-Q disclosed material weaknesses in internal control over financial reporting. Management also concluded that disclosure controls and procedures were not effective as of November 2, 2024. That is the company’s own formal assessment, not an inference drawn solely from the size of the correction.
A material weakness has a specific meaning. Under PCAOB Auditing Standard 2201, it is a deficiency, or combination of deficiencies, creating a reasonable possibility that a material misstatement will not be prevented or detected promptly. An actual material misstatement does not have to occur for that definition to be met.
That resolves the apparent tension between Macy’s two disclosures. Management could conclude that the historical errors were not material to the previously issued statements and still identify material weaknesses in the controls. The first judgment concerns the statements already issued. The second concerns what the deficient system could fail to prevent or detect.
Can a dishonest employee defeat sound controls?
Yes. Internal control provides reasonable assurance, not a guarantee. PCAOB Auditing Standard 2401 recognizes that fraud can involve concealment, falsified documentation and circumvention of controls. Discovering misconduct does not, by itself, prove that every related control was badly designed.
But Macy’s did not disclose misconduct alone. It also disclosed material weaknesses. The generic observation that determined employees can evade controls cannot erase that separate finding.
The quality of supporting evidence also matters. PCAOB Auditing Standard 1105 requires auditors to consider evidence’s relevance and reliability. Information produced by a company requires attention to its accuracy and completeness. An entry’s presence in an accounting system is not independent proof that the entry is justified.
Those standards do not establish an undisclosed audit failure at Macy’s. They explain why identifying the person who made an entry does not finish the inquiry into the reporting process.
Who retained responsibility?
Exchange Act Rule 13a-15 places responsibility for maintaining and evaluating reporting controls on the issuer. Rule 13a-14 requires the prescribed executive certifications accompanying quarterly reports. Neither rule transfers the company’s reporting obligations to the employee who prepares an accrual.
That does not turn corporate responsibility into proof of executive participation. It establishes who owns the reporting system. Macy’s could dismiss the identified employee and correct the historical numbers, but neither step would by itself demonstrate that the disclosed control weaknesses had been remediated.
The distinction is consequential. A personnel finding identifies conduct. An accounting correction repairs reported information. Remediation must address the controls that management found deficient.
Was it really a one-employee problem?
No, not as an explanation of the reporting failure. Macy’s investigation attributed the intentional concealment to one employee, and the public record does not support accusing others of participating. But Macy’s own filing also identified material weaknesses in the company’s controls. One identified actor explains who made the concealed entries. It does not explain away the corporate system that failed to prevent or detect them.
