A major US retailer disclosed a breach affecting more than 50 million customer records, including emails and partial payment details.
The company says the intrusion was detected within 72 hours and has since been contained with help from federal investigators.
Customers are urged to monitor accounts and enroll in the free credit monitoring service being offered.