The compromised data includes Payment card information such as numbers and expiration date for the payment cards. However, there is no evidence that other data such as names, PINs,addresses have been accessed.
The data breach occurred between May 8, 2013 and January 27, 2014. The company said only a small percentage of cards(7%) used at Michaels stores during this period were impacted by this breach.
The company is offering one year free credit card monitoring. After receiving limited reports of fraud, the company is also offering one year free identity protection and fraud assistance services.
The location of affected stores and dates of exposure are listed here.
Aaron Brothers, one of the subsidiaries of Michaels stores, was also attacked by criminals. The breach which took place between june 26,2013 and Feb 27,2014 have affected approximately 400,000 cards.
"We have now identified and fully contained the incident, and the malware no longer presents a threat while shopping at Michaels or Aaron Brothers" The retailer said they have removed the malware in question.
