The US retailer Target revealed on Friday that the number of people whose personal information was stolen last month by hackers could be as high as 110 million — more than twice the number previously disclosed.

“This theft is not a new breach, but was uncovered as part of the ongoing investigation,” a company statement said. Friday’s disclosure added 70 million names, mailing addresses, phone numbers or e-mail addresses to the previous toll of 40 million credit card numbers and security codes stolen from customers who shopped at Target stores between late November and mid-December.

It was not yet clear how much overlap there was between the two groups, leading US media to estimate a total of between 70 and 110 million customers whose data was stolen.

“I know that it is frustrating for our guests to learn that this information was taken and we are truly sorry they have to endure this,” said Gregg Steinhafel, Target’s Chairman and Chief Executive, according to the statement.

Customers will have no liability for any fraudulent charges arising from the breach, Target said.

Target also provided an update to its earnings outlook indicating that the company’s fourth quarter results likely would be affected by the breach.

The company reported “meaningfully weaker-than-expected” sales since the data breach and warned that the breach may have a “material adverse effect” on Target’s financial performance in the fourth quarter and the future.

There are about 1,800 Target stores in the US and Canada and the reported data breach is one of the largest on record.