NEW YORK (AP) — Home Depot said Thursday that a data breach that lasted for months at its stores in the U.S. and Canada affected 56 million debit and credit cards, far more than a pre-Christmas 2013 attack on Target customers.

The size of the theft at Home Depot trails only that of TJX Companies’ heist of 90 million records disclosed in 2007. Target’s breach compromised 40 million credit and debit cards.

Recommended Stories

Target faces bigger challenges than TJX

Shoppers fret about authenticity of Target emails after hacking

Neiman Marcus is latest victim of security breach