Members’ names, addresses, and credit card or bank account information may have been stolen by a former employee.