The investigation into the security breach that enabled hackers to steal millions of pieces of customer information at embattled retailer Target could uncover further damage than is currently known, the company disclosed in its annual report filing today. “Our investigation of the matter is ongoing, and it is possible that we will identify additional information that was accessed or stolen, which could materially worsen the losses and reputational damage we have experienced,” the company said in its report with the U.S. Securities and Exchange Commission. As an example, the company cited the revelation in January that the thieves stole personal information from up to 70 million customers in addition to payment information from 40 million shoppers.
This article originally appeared on Recode.net.