IRVING, Texas - Michaels Stores Inc. says about 2.6 million cards used at its namesake stores may have been affected in a security breach but it has received "limited" reports of fraud.
The nation's largest arts and crafts chain, based in Irving, Texas, says that its subsidiary Aaron Brothers was also attacked. The company said that both stores were attacked by criminals using highly sophisticated malware that had not been encountered previously by the two security firms that were conducting the investigation.
The breach affected customers at 21 Michaels stores and two Aaron Brothers stores in Colorado between May 8, 2013 and February 27, 2014.
"The analysis conducted by the security firms and the Company shows that approximately 2.6 million cards may have been impacted, which represents about 7% of payment cards used at Michaels stores in the U.S. during the relevant time period," Michaels officials said.
"The Company estimates that approximately 400,000 cards [at Aaron Brothers] were potentially impacted during this period," Michaels officials said.
The details come nearly three months after Michaels disclosed that it may have been a victim of a data breach.
Learn more on Michaels website: http://www.michaels.com/corporate/payment-card-notice,default,pg.html