"According to filings with state attorneys general, the compromised data includes names, Social Security numbers, and financial account details."