NEW YORK/BOSTON (Reuters) - The data breach at Target Corp over the holiday shopping season was far bigger than initially thought, the U.S. retailer said on Friday, as state attorneys general announced a nationwide investigation into the cyber-attack.