Contact lens retailer says more than 16,000 customers’ were at risk of data theft.