Staples may be the latest major US retailer to be hit by a payment-systems breach, the company has confirmed