The breach exposed the personal data of about 22 million customers, according to the announcement by the states’ attorneys general.
Compromised data included names, email addresses, mailing addresses, passwords, phone numbers and, in certain instances, Social Security numbers as well as partial credit card information.