More than 282,000 credit and debit card numbers lifted from Wisconsin Home Depot stores after a breach are on sale on the black market, according to a report from the Milwaukee Journal Sentinel.

The breach at the home improvement retailer exposed information on around 56 million payment cards, Home Depot announced Thursday, although it has yet to reveal the locations affected. The Journal Sentinel was able to gain access—“in less than a minute”—to an underground website where the cards are being sold. The paper stressed that it did so “legally and without payment” and could confirm that the breach affected all 26 of the Wisconsin Home Depot locations.

Although the The Journal Sentinel did not buy the information, the report noted that sellers were still guaranteeing “a valid rate of 100%,” which is typically done only when they feel sure the cards have not been canceled.