Target announced Friday that sensitive information, including customers' names, mailing addresses, phone numbers and email addresses, was stolen from up to 70 million people in the late November to early December data breach.
That's possibly in addition to the 40 million credit card and debit card accounts that the company previously reported were taken. That could bring the total of affected customers as high as 110 million, though it's possible that the groups overlap.
Target found that additional customers were affected during the company's ongoing investigation into the data breach, it discovered that additional customer information was stolen, including mailing addresses, phone numbers and emails.
Target is offering one year of free credit monitoring and identity theft protection to anyone who shopped in their U.S. stores.
“I know that it is frustrating for our guests to learn that this information was taken and we are truly sorry they are having to endure this,” Target CEO Gregg Steinhafel, said in a press release. “I also want our guests to know that understanding and sharing the facts related to this incident is important to me and the entire Target team.”
Comparable same-store sales, a key measure of retail store performance, dropped 2 to 6 percent during the fourth quarter after the company announced the data breach, Target said Friday.
This article has been updated.