IRVING, Texas (AP) — The nation’s largest arts and crafts chain, Texas-based, Michaels Stores, says about 2.6 million debit and credit cards used at its namesake stores may have been affected in a security breach.

But the chain says it has received “limited” reports of fraud. A subsidiary, Aaron Brothers, was also attacked by criminals using highly sophisticated malware.

In Kansas, the chain has stores in  Wichita, Lawrence, Shawnee, Topeka, Olathe and Overland Park.