Aberystwyth University has told students that “no bank account or credit card details were taken”