The database in question contained information including user names, encrypted passwords, dates of birth, email addresses, billing addresses, and the first and last four digits and expiration dates of customer credit cards.There is no evidence, and we have no reason to believe, that full credit card information was accessed or compromised in any way.