The breach emerged this week when a threat actor claimed they stole 2 GB worth of information from the company that included millions of records.