The retailer said it was investigating a report that customer credit and debit card data was stolen from its systems and put up for sale online.