Michaels Reveals Details of 8-Month Long Security Breach
Posted on April 17, 2014Michaels has revealed details of a security breach at its stores that lasted up to 8 months long. Michaels says its Michaels stores in the U.S., and its subsidiary, Aaron Brothers, were attacked by criminals using highly sophisticated malware.
At Michaels stores the attack targeted point-of-sale systems at a varying number of stores between May 8, 2013 and January 27, 2014. The company says analysis by security firms it hired indicate hat approximately 2.6 million payment cards may have been impacted. At Aaron Brothers stores about 400,000 cards were potentially impacted between June 26, 2013 and February 27, 2014.
Michaels has also posted a FAQ about the breach here. The FAQ says, "The affected U.S. systems contained certain payment card information, such as payment card number and expiration date, about both Michaels and Aaron Brothers customers. There is no evidence that other personal information of these customers, such as name, address or PIN, was at risk in connection with this issue."
The company says the malware no longer presents a threat in its stores. Krebs on Security has more details about the security breaches here.