. "Personal security question and mobile and dial-in authentication information were also accessed, but financial information such as credit cards, billing addresses, or real names were not compromised." . . . . .