Bank account numbers and statements as well as Social Security numbers were among the information exposed online.