It remains unclear who was responsible for the attack and whether additional data has been compromised.