Michaels, the nation's largest arts and crafts chain, said that nearly three million debit and credit cards may have been exposed in their data breach. The company said that the data security attack has been contained.
The company reported that close to 2.6 million cards used in payments at Michaels stores were potentially exposed between May 8, 2013 and January 27, 2014.
Another 400,000 cards may have been affected at Aaron Brothers stores between June 26, 2013 and February 27, 2014.
Michaels announced that debit and credit card numbers and expiration dates may have been exposed, but personal information such as addresses, names and PINs were not at risk. The company will offer credit monitoring, identity protection and fraud assistance to customers who have been affected by the breach.
Michaels operates over 1,100 stores around the country as well as selling products online.