649,055 customers’ names, user names, mailing addresses, email addresses, phone numbers and birthdates were exposed.