Customers’ credit or debit card account numbers, expiration dates and card verification numbers were accessed by hackers.