The incident is believed to involve a third-party bad actor who attempted to compromise data in late December 2023 and may have exposed certain data in April 2024 and the summer of 2024.
The allegedly leaked information includes names, email addresses, phone numbers, Social Security numbers and mailing addresses.