(Reuters) - Target Corp said data from about 40 million credit and debit card accounts might have been stolen over 19 days starting the day before Thanksgiving, in one of the largest credit card breaches at a U.S. retailer.