An undisclosed number of customers’ names, credit/debit card numbers, expiration dates and security codes were exposed.