Sally Beauty Holdings (SBH) said Monday that credit card data from up to 25,000 customer accounts was compromised and may have been stolen in a breach of its systems.
The cosmetics company, which has more than 2,700 stores in the U.S., is working with Verizon’s (VZ) cybersecurity unit and the U.S. Secret Service to investigate the attack.
Sally Beauty also said “prior data security incidents at other companies” have shown that it’s difficult to determine the exact size of the data breach until a comprehensive forensic investigation is completed.
“As a result, we will not speculate as to the scope or nature of the data security incident,” the company added.
The Denton, Texas-based company will notify affected consumers “as the facts develop.”
Earlier this month, Sally Beauty disclosed an apparent attack on its network after its systems detected an intrusion. At the time, it didn’t believe any information was accessed.
The announcement came after the wide-scale data breach at Target (TGT), in addition to attacks at arts and crafts chain Michaels Stores and high-end retailer Neiman Marcus.
The Target breach, which exposed 40 million payment cards and 70 customer accounts with personal information, is one of the largest on record.
Sally Beauty shares climbed 12 cents, or 0.4%, to $27.58 in recent trading.