Nationwide craft retailer Michaels faces a second lawsuit from aChicago-area consumer over its card data breach that it made publiclast month.

Mary Allen, of Libertyville, Ill., charged in her complaint thatthe national retailer had known about the breach for three monthsbefore it made it public on May 5.

She also charged that she used her debit card to purchase $18.16worth of merchandise from a Michaels store in Vernon Hills, Ill.,and “unwittingly had her debit card information and PIN numberstolen as a result,” according to the complaint.

She subsequently discovered that her card had been used twice tosteal over $1000 from her account at Harris Bank.

She alleged the Texas-based retail chain did not use“commercially reasonable steps” to safeguard its personalidentification number pads from skimming attacks that eventuallyimpacted stores in seven states.

The federal suit seeks to be recognized as a class actioncomplaint with the class consisting of “all persons residing in theUnited States who made an in-store purchase at a Michaels store inthe United States using a debit card that was swiped through a PINpad at any time from January 1, 2011 to the present.”

Both suits were filed in U.S. District Court for NorthernIllinois.