After nearly a weeklong investigation, Home Depot confirmed on Monday that its payment data systems have been breached.

Customers using payment cards at stores in the U.S. and Canada may have been affected, but so far there is no evidence that stores in Mexico or customers who shopped online have been impacted, according to an update emailed to on Tuesday.

There is also no evidence that debit PIN numbers were compromised, however, the investigation is ongoing, the update indicates, adding the investigation is focused on April forward, and steps have been taken to address the malware and protect customer data.

“We owe it to our customers to alert them that we now have enough evidence to confirm that a breach has indeed occurred,” Frank Blake, chairman and CEO of Home Depot, wrote in the update, emphasizing customers are not responsible for fraudulent charges.