Customer names, mailing addresses, email addresses and payment card information may have been accessed at 51 stores in 24 states.