Michaels Stores Inc. said Thursday that about 2.6 million customer credit and debit cards used at its namesake stores may have been affected in a security breach but it has received "limited" reports of fraud.
The nation's largest arts and crafts chain, based in Irving, Texas, said that its subsidiary Aaron Brothers was also attacked, exposing information on another 400,000 cards.
The company said that both store chains were attacked by criminals using highly sophisticated malware that had not been encountered previously by the two security firms that were conducting the investigation.