Staples Confirms Data Breach; Up to 1.2M Cards Affected