Goodwill Industries says 11 stores in southern and southwestern Colorado were affected by the theft of customers' credit card and debit card numbers.
The organization said Tuesday six of the stores are in Colorado Springs and the others are in Canon City, Fountain, Grand Junction, Pueblo and Woodland Park.
Goodwill says customer information was stolen from more than 300 stores in 19 states and Washington, D.C.
Reports about fraud linked to shoppers' cards have been "very limited," Goodwill said. The organization didn't say whether any reports had been made in Colorado.
Goodwill blamed the security lapse on an unidentified contractor's payment processing system. The company had said in July that it was investigating the breach.