Customer names, addresses, e-mail addresses, phone numbers, credit card numbers, expiration dates and verification codes may have been accessed.