(CN) - Target said today that security may have been breached on as many as 40 million credit and debit cards swiped from Nov. 27 until Dec. 15.
The stolen data includes names, credit card numbers, expiration dates and the three-digit security codes on the backs of cards, but did not affect online purchases, Target said.
The possible ID thefts affected all swiped cards, not just Target cards.
Target told customers to check their statements. Suspicious charges can be reported to Target at (866) 852-8680.
Suspected identity theft should be reported to police or to the Federal Trade Commission.
Target has nearly 1,800 stores in the United States.
Read the Top 8
Sign up for the Top 8, a roundup of the day's top stories delivered directly to your inbox Monday through Friday.