A data breach at department store chains Saks Fifth Avenue, Saks Off Fifth and Lord & Taylor across North America has compromised the personal information of customers who shopped at the stores.
The chains' parent company, Canada-based Hudson's Bay Co., announced the breach of its store payment systems on Sunday. The company said it was investigating and taking steps to contain the attack.
New York-based security firm Gemini Advisory LLC said that a hacking group called JokerStash announced last week that it had put up for sale more than 5 million stolen credit and debit cards, and that the compromised records came from Saks and Lord & Taylor customers.
Hudson's Bay has not said how many stores or customers were affected. The company said customers will not be liable for fraudulent charges. It plans to offer free identity protection services.
