While the hackers were able to access Facebook and Twitter access tokens, no passwords, billing information or other user information was exposed.