The exposed data may have included cardholder names, account numbers, expiration dates and verification codes, the women's apparel retailer said on Friday.
Bebe, which also operates stores in Canada, said the affected transactions were made between Nov. 8 and Nov. 26, the day before Thanksgiving.
Security blog KrebsOnSecurity said on Thursday that hackers may have stolen credit and debit card data from bebe during Thanksgiving and Black Friday.
Bebe is the latest retailer to fall prey to hackers.
Previous victims included Home Depot Inc, Target Corp, Sears Holdings Corp and Michaels Stores Inc.
Bebe said online transactions were not affected.
"We moved quickly to block this attack and have taken steps to further enhance our security measures," Chief Executive Jim Wiggett said in a statement on Friday.
Bebe operates 175 retail stores and 35 outlet stores in the United States, U.S. Virgin Islands, Puerto Rico and Canada.
Bebe's shares, which have fallen by more than half in the past nine months, closed at $2.73 on the Nasdaq on Thursday.
© Thomson Reuters 2014
For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.