"Social security numbers and other financial information were not exposed." . . . .