Customers’ names, user names, passwords, addresses, phone numbers, e-mail addresses and credit card information may have been accessed.