The chain's parent company says hackers may have used malware to steal some customers' payment information.