The company had announced on January 19 that it was hit by a security breach; three days before the announcement, the company had announced that it was temporarily disabling card payments on its website.