From the news reports, it looks like the compromise was in the Chicago area; pin pad tampering, limiting the exposure to Michael's customers in that area. On May 5th.
Sometimes there is a gap between the compromise and the attempted fraudulent activity, when the bad guys are generating new cards, distributing them, etc.