Target now says 70 million customers may have had data stolen in the credit and debit card hack that occurred at the beginning of the holiday shopping season, almost double the amount of shoppers originally reported.
According to a statement released by Target on Friday, the data breach that occurred between November 17 and December 15 affected many more customers than previously thought. Previous reports estimated the breach impacted around 40 million customers.
The investigation also discovered that customer email addresses, phone numbers, names, and mailing addresses were also stolen from their systems, on top of the hacks on credit and debit card data that had been previously reported.
The company said that in most cases only parts of customer personal information was uncovered, and they are attempting to contact individuals whose entire email addresses were released.
“I know that it is frustrating for our guests to learn that this information was taken and we are truly sorry they are having to endure this,” said Gregg Steinhafel, chairman, president and chief executive officer, Target in a statement. “I also want our guests to know that understanding and sharing the facts related to this incident is important to me and the entire Target team.”
Target is offering a year of free credit monitoring and identity theft protection for U.S. customers.
More Must-Reads from TIME
- Donald Trump Is TIME's 2024 Person of the Year
- Why We Chose Trump as Person of the Year
- Is Intermittent Fasting Good or Bad for You?
- The 100 Must-Read Books of 2024
- The 20 Best Christmas TV Episodes
- Column: If Optimism Feels Ridiculous Now, Try Hope
- The Future of Climate Action Is Trade Policy
- Merle Bombardieri Is Helping People Make the Baby Decision
Contact us at letters@time.com