Michaels says more than two-and-a-half million payment cards were stolen in a security breach.
About 400-thousand payment cards for its subsidiary Aaron Brothers may have been breached as well by sophisticated malware.
This is the latest of several security attacks on major U.S. retailers following Target's massive credit card breach during last year's holiday shopping season.
The Michaels security attack occurred between May of 2013 and the end of January this year.
(Photo: MARTIN BERNETTI / 2013 AFP)