After a two-month wait, Staples on Friday evening announced hackers broke into its computers and stole data on 1.16 million shoppers’ credit cards and debit cards.
Staples first announced it was investigating a potential data breach in the Northeast in October. Staples released details of its investigation on Friday, just as the holiday shopping season comes to a close.
The breach affects those who shopped at a small fraction of Staples (SPLS) stores nationwide between July 20 and Sept. 16 this year. Cybercriminals now know a shopper’s name, card number, its expiration date and card verification code.
The breach affected 115 of the company’s approximately 1,400 office supply stores in the United States. A web page has been set up noting which stores were affected.
