Last week we told you about a debit card breach found in Chicago area Michaels arts and craft stores. This week, the Chicago Tribune says that the impact is much more widespread than thought, as it turns out that actually, thieves stole debit card info at Michaels in 20 different states.

The crooks tampered with the PIN pads at checkout, either by hacking into them or by replacing them with their own, compromised PIN pads

The store said they had discovered 90 pads across the following states that were tampered with: Illinois, Colorado, Delaware, Georgia, Iowa, Massachusetts, Maryland, North Carolina, New Hampshire, New Jersey, New Mexico, Nevada, New York, Ohio, Oregon, Pennsylvania, Rhode Island, Utah, Virginia and Washington.

If you’ve shopped at a Michaels, keep an eye on your bank account. With a debit card your liability is a max of $50 if suspicious activity is reported within two days, and $500 if reported within 60. Look for a strange withdrawal of around $503. That was the amount most often deducted from the debit cards stolen from Michaels.

Michaels says debit card fraud more widespread than thought [Chicago Tribune] (Thanks to orlofsky!)

Want more consumer news? Visit our parent organization, Consumer Reports, for the latest on scams, recalls, and other consumer issues.