Poppins Payroll's data breach could leave people's information at risk of being stolen and used for years.