According to an FAQ page on its website, the types of personal data that may have been compromised includes names, email addresses, home addresses, phone numbers, the last four digits of bank card numbers (but not the whole number) and/or bank account numbers and sort codes.