Staples: Cyber Criminals Compromised 1.2 Million Customer Credit Cards

Staples, headquartered in Framingham, said cyber criminals may have compromised 1.2 million customer cards.

Staples, said criminals deployed malware to point-of-sale systems at 115 of its more than 1,400 United States retail stores, during a previously reported data breech in October.

Staples said its investigation revealed malware may have allowed the criminals access to transaction data “including cardholder names, payment card numbers, expiration dates, and card verification codes.”

At 113 stores, the malware may have allowed access to the customer information for purchases made from Aug. 10 through Sept. 16, 2014, said the retail giant.

At two stores, the malware may have allowed access to data from purchases made from July 20 through Sept. 16, 2014, the report issued on Friday said.

Staples did not say where those stores were located.