Michaels hack hit 3 million