Saks Fifth Avenue and Lord & Taylor have been hit with a data breach affecting millions of customers, The Wall Street Journal reports. A spokesman for Hudson’s Bay Co., which owns the two department store chains, confirmed the security breach but said it appears not to have affected the department store chains’ ecommerce operations. “We have identified the issue, and have taken steps to contain it,” the spokesman was quoted as saying. While the company has not provided specifics on how much data was stolen, New York-based cybersecurity firm Gemini Advisory says at least 125,000 cards used at Saks or Lord & Taylor stores have already been put up for sale by hackers on dark web forums. The hackers, a group known as JokerStash Syndicate, claim to have data from five million credit cards and debit cards in their possession, according to the report.