COEUR d'ALENE - Chuck Rubin, CEO of Michaels Stores Inc., announced Thursday that a data breach affecting credit and debit card information for 2.6 million of its customers has been contained.

In a statement published on the retail craft and art supply company's website, Rubin said the breach stemmed from an attack by criminals "using highly sophisticated malware." The attack targeted the point-of-sales systems at Michaels stores between May 8, 2013 and Jan. 27.

"The affected systems contained certain payment card information, such as payment card number and expiration date," Rubin said in the statement. "There is no evidence that other customer personal information, such as name, address or PIN, was at risk in connection with this issue."

Rubin added that the company has received a "limited" number of reports of fraudulent activity with cards connected to Michaels.

According to information on the Michaels website, customers at its Coeur d'Alene store, located on W. Canfield Avenue, were potentially affected by the breach during the following dates:

* May 8 - Aug. 10, 2013

* Aug. 31 - Oct. 8., 2013

* Dec. 12, 2013 - Jan. 19

The company reported that its customers who made purchases during those dates are encouraged to monitor all of their payment card activity and contact their bank or card issuer if they notice suspicious activity.

Michaels is also offering affected customers a free year of identity protection and credit-monitoring services.

"In an era where very sophisticated and determined criminals have proven capable of successfully attacking a wide range of computer networks, we must all increase our level of vigilance," Rubin said. "We are committed to working with other parties to improve the security of payment card transactions for all consumers."

A manager at the Michaels Coeur d'Alene store told The Press Friday that she could not comment on the breach.