An undisclosed number of customers’ names, bank routing numbers and bank account numbers were mistakenly exposed.