Michaels admits to data breach, 2.6 million customers at risk

Crafts store Michaels confirmed that as many as 2.6 million customers, totaling almost 7 percent of customers paying with debit and credit card, were affected by a data breach that began last year.

Customer information exposed includes card numbers and expiration dates, though the store didn't confirm if names, addresses and PIN numbers were also breached. Since the news of the breach earlier this year, the popular arts and crafts store has removed the malware and reportedly boosted security to try and prevent future incidents.

In addition to Michaels, its Aaron Brothers subsidiary also suffered a data breach affecting around 400,000 debit and credit cards.

"Our customers are always our number one priority and we are truly sorry for any inconvenience or concern Michaels may have caused," said Chuck Rubin, Michaels CEO, in a press statement. "We are committed to assisting affected customers by providing fraud assistance, identity protection and credit monitoring services. Importantly, with this incident ow fully contained, we can assure customers this malware no longer presents a threat to shoppers at Michaels or Aaron Brothers."