The attack was recognised on Sunday afternoon, so they chose to attack during the end of the weekend.

If all stores are incapable to service and apparently no customer data has been compromised, it could be ransomware.