A data breach at department store chains Saks Fifth Avenue, Saks Off Fifth and Lord & Taylor has compromised the personal information of customers who shopped at the stores.

The chains’ parent company, Canada-based Hudson’s Bay Co., announced the breach of its store payment systems on Sunday. The company said it was investigating and taking steps to contain the attack.

Get push notifications with news, features and more.

+ Follow

Following
You’ll get the latest updates on this topic in your browser notifications.

Pedestrians are reflected in the glass doors of a Saks Fifth Avenue store in Cincinnati, Ohio, U.S., on Tuesday, Aug. 19, 2014. The U.S. economy will expand 3 percent in the third quarter, according to the latest results of a Bloomberg News survey of 76 economists. Photographer: Ty Wright/Bloomberg via Getty Images

RELATED PHOTOS: UPDATED! The Best Thing to Buy from Each of Meghan Markle’s Favorite Fashion Brands

New York-based security firm Gemini Advisory LLC says that a hacking group called JokerStash announced last week that it had put up for sale more than 5 million stolen credit and debit cards, and that the compromised records came from Saks and Lord & Taylor customers.

Looking for more style content? Click here to subscribe to the PeopleStyle Newsletter for amazing shopping discounts, can’t-live-without beauty products and more

Hudson’s Bay hasn’t said how many stores or customers were affected. The company says customers won’t be liable for fraudulent charges. It plans to offer free identity protection services.