Target says its customers might have fallen victim to the second-largest heist of payment card data in U.S. history.