Our preliminary investigation suggests that the breach happened in September 2016 and it has since been fixed.” The company added, “We take any such breaches very seriously and we follow very strict policies when it comes to security.