According to user reports on social media, the exposed information included customers’ names, phone numbers, addresses, account balances, and credit card details like the expiration dates and the last four digits.