Skip to content

Michaels Stores

Disclosed Jan 27, 201412 years agoConfirmed

Official notice

Michaels and Aaron Brothers confirm point-of-sale payment card breach

Craft retailer Michaels confirmed a payment card data breach at its Michaels and Aaron Brothers stores and disclosed the data security incident and related costs in its SEC filings.

What is known

People affectedNot stated in the sources we have
DisclosedJan 27, 2014
AttackHacking
Data exposedPayment cards, Names
SectorRetail · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Michaels Storesoag.ca.gov · Official notice
Michaels Stores 10-Q, June 2014sec.gov · SEC filing
Indiana Attorney General 2014 data breach report: Michaels Storesin.gov · Official notice
Maine Attorney General breach notice archive: Michael's Storesmaine.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJan 27, 2014
Indiana AGresidents of INJan 27, 2014
Maine AGresidents of MEJan 27, 2014
ResearchtotalApr 17, 2014
History of this record
  • 2026-09-25 · data_types: ["payment-card"] to ["payment-card","names"] · backfill source
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2014.pdf · backfill source
  • 2026-09-25 · attack: unknown to hacking · seed source
  • 2026-09-25 · data_types: [] to ["payment-card"] · seed source
  • 2026-09-25 · summary: empty to Craft retailer Michaels confirmed a payment card data breach at its Michaels and Aaron Brothers stores and disclosed the data security incident and related costs in its SEC filings. · seed source
  • 2026-09-25 · title: empty to Michaels and Aaron Brothers confirm point-of-sale payment card breach · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Michaels Stores

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.