The data stolen includes individuals’ names, addresses and some dates of birth but not bank details.