The exposed data includes customer names, email addresses, service usage details, and purchase information, but credit card information was not stored in the compromised database.