KrebsonSecurity has a good rundown on what we know so far. Basically there has been a breach, some CC companies are noticing bad traffic, and the US secret service is in on the act.
July 17th the first card companies were noticing suspicious traffic.
There is no other information in the news reports
Goodwill Industries International own press release does not confirm an actual breach only an investigation.