Officials say data sets containing stolen personal information, like passwords, are available online.
Authorities allege the 22-year-old suspect found some of that data worked with the M-Perks rewards program.
Attorney General Dana Nessel says these types of crimes can go undetected.
“A lot of times people are embarrassed. They think they did something wrong, and so they don’t want to report it. Which, first of all, can lead to an escalation since their information is already out there. But also, how are we supposed to investigate a crime that we don’t know took place.”
The charges in the Meijer case relate to seven specific accounts, but Nessel says hundreds of customers were affected.