The company says the breaches were the result of ‘a very targeted attack on user names, passwords and security questions.’