In an email informing customers of the cyberattack, the bookstore chain said that their financial information, including credit card numbers, was not exposed in the breach.
“While we do not know if any personal information was exposed as a result of the attack, we do retain in the impacted systems your billing and shipping addresses, your email address and your telephone number if you have supplied these," Barnes & Noble said in the note to customers.