Label giant Avery says website hacked to steal credit cards