Nancy and Rachel Nelson of Moss Point leave Michaels in D'Iberville, Miss., Nov. 28, 2013.
John Fitzhugh—AP
April 17, 2014 6:20 PM EDT

Michaels Stores Inc. announced in a press release Thursday that as many as 2.6 million payment cards used at Michaels and Aaron Brothers craft stores may have been affected by a security breach. They say they have so far received “limited” reports of fraud.

A criminal attacked the largest arts and crafts chain in the U.S. using sophisticated malware. The company learned of a possible data security breach in January but did not discover the details until after several months of investigation. Michaels Stores said they had identified and fully contained the incident.


Write to Eliana Dockterman at

Read More From TIME

Related Stories