Customer names, addresses, credit or debit card numbers, expiration dates and verification numbers may have been accessed.