The company issued a statement saying the breach affects fewer than 5% of its total transactions. Those who shopped at one of the 34 their affected stores were affected by this breach.
According to the statement, the attack began on October 31,2012 and may have continued through March 20 of this year.
The exposed information includes names, credit/debit card number, expiration date and card security code or check information including Bank account number, bank routing number, birth dates, driver's license number.
Spec's spokeswoman Jenifer Sarver told the Houston Chronicle that the breach affected "an estimated fewer than 550,000" customers and Spec's employees.
Spec's says it's working with United States Secret service in ongoing criminal investigation to arrest the attackers and taking steps to prevent future attacks.
