"The information included sensitive data about customers and/or employees.Notices Sent to Private, Public EntitiesThe notices went to both private and public entities, including schools and local governments, the agency said." . . . . .