Michaels Stores, Inc. reported a data security incident affecting approximately 3 million payment cards used at Michaels and Aaron Brothers stores between May 2013 and February 2014. Criminals used sophisticated malware on point-of-sale systems to capture payment card numbers and expiration dates. The incident is now fully contained. Michaels offered 12 months of free identity protection and credit monitoring to affected customers.
Affected (this filing): 3,000,000