Customer databases have been compromised after internal system credentials were forwarded to a personal account.