. . . "But there is no evidence that other personal information such as names, addresses or PIN numbers were at risk, Michaels said." .