The company said some non-sensitive customer data was exposed, including user IDs, names and email addresses.