Australian daily deals website Catch of the Day announced a three-year-old data breach compromising credit cards and passwords to its customers on Friday evening.