The stolen data reportedly includes customer names, addresses, emails and telephone numbers, with no evidence that payment details were included in the breach.