Personal data, including partial payment information, is thought to be included.