Customer payment info was leaked in the breach though chip-and-pin protection prevented the cards from being used fraudulently.