The company says contact information may have been exposed while stressing no payment or password data was affected.
