Michaels Stores has confirmed that a security breach has taken place and affected up to three million customers, including shoppers of subsidiary Aaron Brothers. The breach started May 2013 and occurred through the end of January 2014, according to reports.
Executives from the craft chain learned of a potential security breach at the end of January 2014, and have spent the last three months investigating data leaks before making the announcement. The news follows similar target breach announcements from Target and Neiman Marcus in December 2013.
The Michaels investigation revealed that approximately 7% of all debit and credit cards used in Michaels’ locations, and up to 2.6 million customers, may have been affected by the security breach. Approximately 400,000 credit and debit cards used in Aaron Brothers locations also were affected.
Advertisement
Reports indicate that only certain payment card information was affected by the breach. While payment card numbers and expiration dates were stolen, there is no evidence that more personal data — such as customer name, address or PIN — was compromised.
“In an era where very sophisticated and determined criminals have proven capable of successfully attacking a wide range of computer networks, we must all increase our level of vigilance,” said Chuck Rubin, CEO of Michaels. “Michaels is committed to working with all appropriate parties to improve the security of payment card transactions for all consumers. Our customers are always our number one priority and we are truly sorry for any inconvenience or concern Michaels may have caused.”
Michaels has provided data to credit card brands regarding potentially affected accounts, and is offering identity protection, credit checks and fraud assistance services to customers in need.
